Tagged | security

• Improving Web Vulnerability Management through Automation

  (eng.lyft.com)

  #software-engineering #automation #security #web

• Biometric authentication - Why do we need it?

  (engineering.grab.com)

  #software-engineering #software-architecture #security #auth

• How our content abuse defense systems work to keep members safe

  (engineering.linkedin.com)

  #AI #security #practices #privacy

• Presentation: Getting the Most Out of Sandboxing

  (www.infoq.com)

  #security #browsers #systems

• Secure your Kubernetes deployments with eBPF

  (developers.redhat.com)

  #security #kubernetes #cloud #eBPF

• Snaring the Bad Folks

  (netflixtechblog.com)

  #software-architecture #infra #security #cloud

• How We Used eBPF to Build Programmable Packet Filtering in Magic Firewall

  (blog.cloudflare.com)

  #security #networking #systems #eBPF

• Permissions, Privileges, and Scopes

  (auth0.com)

  #software-design #security #auth

• The Case of the Recursive Resolvers

  (slack.engineering)

  #infra #security #networking #DNS

• How Two Interns Are Helping Secure Millions of Lines of Code

  (slack.engineering)

  #software-engineering #security #static-analysis

• Continuous Container Vulnerability Testing with Trivy

  (semaphoreci.com)

  #devops #containers #security #CI-CD

• Malware analysis: Hands-On Shellbot malware

  (sysdig.com)

  #security #systems #reverse-engineering

• Meet Ottr: A Serverless Public Key Infrastructure Framework

  (medium.com)

  #software-engineering #software-architecture #infra #security

• Distributed Firewall (DFW): Network security at the host level at LinkedIn

  (engineering.linkedin.com)

  #infra #security #networking

• Powering Security Reports with Cartography and Flyte

  (eng.lyft.com)

  #software-engineering #infra #security

• Revisiting BetterTLS: Certificate Path Building

  (netflixtechblog.com)

  #software-engineering #security #practices #web

• Threat modeling the Kubernetes Agent: from MVC to continuous improvement

  (about.gitlab.com)

  #infra #security #kubernetes #cloud

• Open-sourcing Mariana Trench: Analyzing Android and Java app security in depth

  (engineering.fb.com)

  #dev-tools #security #static-analysis

• The Show Must Go On: Securing Netflix Studios At Scale

  (netflixtechblog.com)

  #infra #security #practices #systems

• Enforcing encryption at scale

  (research.fb.com)

  #software-architecture #security #networking #encryption

• How WhatsApp enables multi-device capability

  (engineering.fb.com)

  #software-design #software-architecture #security

• Enforcing encryption at scale

  (engineering.fb.com)

  #software-architecture #security #networking #encryption

• Practical CPU time performance tuning for security software: Part 2

  (www.elastic.co)

  #performance #security #hardware #systems

• Developers Guide to GPG and YubiKey

  (developer.okta.com)

  #security #hardware #auth

• Presentation: User Adaptive Security

  (www.infoq.com)

  #software-engineering #software-design #security

• Measuring Security Risks in Open Source Software: Scorecards Launches V2

  (security.googleblog.com)

  #testing #security #opensource

• Practical CPU time performance tuning for security software: Part 1

  (www.elastic.co)

  #performance #security #systems

• How We Protect Pinners’ Passwords

  (medium.com)

  #software-engineering #software-architecture #security #auth

• Introducing SLSA, an End-to-End Framework for Supply Chain Integrity

  (security.googleblog.com)

  #software-engineering #security #systems

• Slack Details Its New Role Management Architecture

  (www.infoq.com)

  #software-architecture #security #auth

• How Clever Secures Infrastructure Secrets Using AWS SSM Parameter Store

  (engineering.clever.com)

  #infra #security #cloud

• A deep dive into how we investigate and secure GitLab packages

  (about.gitlab.com)

  #software-engineering #security #practices

• Making Leaked Credentials Useless for Attackers

  (product.hubspot.com)

  #devops #security #auth #cloud

• Introducing Half-Double: New hammering technique for DRAM Rowhammer bug

  (security.googleblog.com)

  #security #hardware #research #systems

• Introducing Firefox’s new Site Isolation Security Architecture

  (hacks.mozilla.org)

  #security #browsers #systems #web

• Building Better IAM with a Scale-Out, OLTP Database

  (www.cockroachlabs.com)

  #software-architecture #DBMS #security #auth

• Mostly harmless: An account of pseudo-normal floating point numbers

  (developers.redhat.com)

  #security #hardware #systems

• Of Protocols and Pythons

  (galois.com)

  #dev-tools #security #python #program-verification

• Enabling Hardware-enforced Stack Protection (cetcompat) in Chrome

  (security.googleblog.com)

  #security #hardware #systems

• Himeji: a scalable centralized system for authorization at Airbnb

  (medium.com)

  #software-design #scaling #security #auth

• Rust in the Linux kernel

  (security.googleblog.com)

  #security #Linux #systems #rust

• A Zero Trust terminal in your web browser

  (blog.cloudflare.com)

  #software-architecture #security #networking

• Extending systemd Security Features with eBPF

  (kinvolk.io)

  #security #Linux #systems #eBPF

• Cloud lateral movement: Breaking in through a vulnerable container

  (sysdig.com)

  #containers #security #cloud #systems

• Evolving Container Security With Linux User Namespaces

  (netflixtechblog.com)

  #containers #security #Linux #systems

• Beat - An Acoustics Inspired DDoS Attack

  (blog.cloudflare.com)

  #scaling #security #CDN #networking

• Security and performance tips and tricks for your GraphQL servers

  (blog.logrocket.com)

  #DBMS #performance #security #graphQL

• Presentation: Making Npm Install Safe

  (www.infoq.com)

  #dev-tools #javascript #security #npm

• Behind the scenes: building a dynamic instrumentation agent for Go

  (blog.sqreen.com)

  #security #GoLang #runtime

• Analysis of Computer Vision Techniques in Malware Classification

  (towardsdatascience.com)

  #deep-learning #image-processing #security

• Preventing Fraud and Fighting Account Takeovers with Kafka Streams

  (www.confluent.io)

  #data-pipeline #software-architecture #security #distributed-systems

• Rolling With The Punches: Shifting Attack Tactics & Dropping Packets Faster & Cheaper At The Edge

  (blog.cloudflare.com)

  #security #CDN #networking #internet

• We Built a Plugin, but It’s Not a Secret

  (open.nytimes.com)

  #software-design #security #secrets #backend

• Building Secure Docker Images - 101

  (medium.com)

  #containers #docker #security #systems

• Presentation: Exploiting Common iOS Apps’ Vulnerabilities

  (www.infoq.com)

  #ios #mobile #security #systems

• Doing AES/GCM in Android: adventures in the field

  (levelup.gitconnected.com)

  #mobile #security #android #systems #encryption

• How to exploit parser differentials

  (about.gitlab.com)

  #security #backend #web

• Providing User Privacy Rights through the California Consumer Protection Act

  (eng.lyft.com)

  #software-architecture #security #privacy

• Speeding up Linux disk encryption

  (blog.cloudflare.com)

  #performance #security #Linux #encryption

• Security Patterns for Microservice Architectures

  (developer.okta.com)

  #software-architecture #security #microservices

• Presentation: Securing Your CI/CD Pipeline

  (www.infoq.com)

  #infra #automation #security #CI-CD

• Open-Sourcing riskquant, a library for quantifying risk

  (netflixtechblog.com)

  #security #analytics #math #systems

• Data Encryption on Android with Jetpack Security

  (android-developers.googleblog.com)

  #mobile #security #android #encryption

• Introducing The API Security Maturity Model

  (nordicapis.com)

  #API #security #auth

• Securing Firefox with WebAssembly

  (hacks.mozilla.org)

  #web-assembly #security #runtime #systems #compilers

• Presentation: Small Is Beautiful: How to Improve Security by Maintaining Less Code

  (www.infoq.com)

  #software-engineering #security #practices

• Using your devices as the key to your apps

  (blog.cloudflare.com)

  #security #auth #cloud

• Presentation: Secure IoT Command, Control, and Exfil with Apache MiNiFi

  (www.infoq.com)

  #security #IoT #hardware #networking

• Playing defense against Gamaredon Group

  (www.elastic.co)

  #security #internet #web #privacy

• Presentation: Managing Privacy & Data Governance for Next Generation Architecture

  (www.infoq.com)

  #software-engineering #software-architecture #security #privacy

• Never Build MFA Again: A Developer's Guide to Transactional MFA

  (developer.okta.com)

  #security #auth #web

• Understanding filesystem takeover vulnerabilities in npm JavaScript package manager

  (snyk.io)

  #javascript #nodeJS #security

• Automated IDOR Discovery through Stateful Swagger Fuzzing

  (engineeringblog.yelp.com)

  #QA #testing #security #runtime

• Presentation: Secrets at Planet-scale: Engineering the Internal Google KMS

  (www.infoq.com)

  #scaling #security #auth

• Safe ACL Change through Model-based Analysis

  (tech.ebayinc.com)

  #security #auth #access-control

• How Docker Authentication Works: By Documentation, MITM, and Implementation

  (levelup.gitconnected.com)

  #software-architecture #docker #security #auth

• PHA Family Highlights: Bread (and Friends)

  (security.googleblog.com)

  #mobile #security #android

• JWT Architecture for Modern Apps

  (levelup.gitconnected.com)

  #software-architecture #security #auth #backend

• Finding Evil on the Network Using JA3/S and HASSH

  (engineering.salesforce.com)

  #security #networking #encryption

• Salesforce Cloud Security: Automating Least Privilege in AWS IAM with Policy Sentry

  (engineering.salesforce.com)

  #security #auth #cloud #access-control

• Cloudflare + Remote Browser Isolation

  (blog.cloudflare.com)

  #security #browsers #internet #web

• Can We Build Trustable Hardware?

  (www.infoq.com)

  #security #hardware #systems

• How to Implement a Secure Central Authentication Service in Six Steps

  (engineering.shopify.com)

  #software-architecture #security #auth #web

• Securing and centrally monitoring accounts in Amazon Web Services

  (www.theguardian.com)

  #security #AWS #auth #cloud

• Presentation: User & Device Identity for Microservices @ Netflix Scale

  (www.infoq.com)

  #software-architecture #scaling #security #microservices #auth

• Protecting programmatic access to user data with Binary Authorization for Borg

  (security.googleblog.com)

  #security #cloud #research #systems

• How CloudSponge Protects Trillions Of Email Addresses From Hackers And Scammers Every Year

  (stackshare.io)

  #software-engineering #software-architecture #security #privacy

• Better password protections in Chrome - How it works

  (security.googleblog.com)

  #software-design #security #browsers

• How to tell secrets

  (www.thoughtworks.com)

  #security #secrets #cryptography

• MySQL Encryption: Talking About Keyrings

  (www.percona.com)

  #DBMS #security #MySql #encryption

• Presentation: Securing Software from the Supply Side

  (www.infoq.com)

  #software-engineering #security #practices

• Lessons learned from handling JWT on mobile

  (tech.just-eat.com)

  #mobile #security #auth

• ESP32 IoT Devices Vulnerable to Forever-Hack

  (www.infoq.com)

  #security #hardware #embedded #systems

• Shopping for an admin account via path traversal

  (about.gitlab.com)

  #security #backend #web

• Organizing and Securing Third-Party CDN Assets at Yelp

  (engineeringblog.yelp.com)

  #security #CDN #web

• Introducing Flan Scan: Cloudflare’s Lightweight Network Vulnerability Scanner

  (blog.cloudflare.com)

  #security #networking #internet #systems

• G-Scout Enterprise and Cloud Security at Etsy

  (codeascraft.com)

  #software-engineering #infra #security

• Push Notifications-based 2-step Verification

  (tech.ebayinc.com)

  #software-design #software-architecture #security #auth

• Privacy Power-Up: Upgrading Pin Links from HTTP to HTTPS

  (medium.com)

  #security #web #encryption

• How Salesforce Protects You From Credential Stuffers

  (engineering.salesforce.com)

  #security #analytics #web

• Protecting against code reuse in the Linux kernel with Shadow Call Stack

  (security.googleblog.com)

  #security #Linux #systems

• How We Sustain DNS Outages at Grofers

  (lambda.grofers.com)

  #security #networking #DNS #internet

• JavaScript frameworks security report 2019

  (snyk.io)

  #javascript #security #frontend

• Going Keyless Everywhere

  (blog.cloudflare.com)

  #security #hardware #systems

• Presentation: Securing a Multi-tenant Kubernetes Cluster

  (www.infoq.com)

  #containers #security #kubernetes #systems

• Delegated Credentials for TLS

  (blog.cloudflare.com)

  #algorithms #security #internet #cryptography

• Multi-cluster security with Falco and AWS Firelens on EKS & ECS

  (sysdig.com)

  #security #microservices #cloud

• Announcing cfnts: Cloudflare's implementation of NTS in Rust

  (blog.cloudflare.com)

  #security #networking #systems #encryption #rust

• DNS Encryption Explained

  (blog.cloudflare.com)

  #security #networking #DNS #internet #encryption

• Presentation: Maintaining the Go Crypto Libraries

  (www.infoq.com)

  #software-engineering #security #practices #GoLang #encryption

• Public keys are not enough for SSH security

  (blog.cloudflare.com)

  #security #networking #encryption #privacy

• Securing Apache Airflow UI With DAG Level Access

  (eng.lyft.com)

  #security #distributed-systems #access-control #graph

• 3 steps toward improving container security

  (developers.redhat.com)

  #containers #security #systems

• Fighting fraud using partially blind signatures

  (engineering.fb.com)

  #software-design #algorithms #security

• Zero Trust at GitLab: Where do we go from here?

  (about.gitlab.com)

  #security #backend #encryption #privacy

• How Dropbox Security builds tools for threat detection and incident response

  (blogs.dropbox.com)

  #software-architecture #security #analytics #backend

• Federated Learning

  (towardsdatascience.com)

  #data-science #machine-learning #security #privacy

• Zero Trust at GitLab: Implementation challenges (and a few solutions)

  (about.gitlab.com)

  #security #networking #web #encryption

• How to build a WAF at the application layer

  (blog.sqreen.com)

  #software-design #security #web

• Apotheosis: A GCP Privilege Escalation Tool

  (codeascraft.com)

  #security #cloud #access-control #systems

• The Technical Challenges of Building Cloudflare WARP

  (blog.cloudflare.com)

  #performance #mobile #security #networking #systems

• Presentation: Modern WAF Bypass Scripting Techniques for Autonomous Attacks

  (www.infoq.com)

  #automation #security #scraping #web

• Everything you wanted to know about addressing security vulnerabilities in Linux-based containers

  (snyk.io)

  #devops #containers #security #Linux #systems

• How Google adopted BeyondCorp: Part 3 (tiered access)

  (security.googleblog.com)

  #security #auth #practices #access-control

• Adventures in the TCP stack: Uncovering performance regressions in the TCP SACKs vulnerability fixes

  (databricks.com)

  #security #networking #systems

• eBay OAuth Client Library in Python and Best Practices

  (tech.ebayinc.com)

  #security #auth #practices #web

• Why Public Key Cryptography Matters

  (developer.okta.com)

  #security #auth #cryptography

• Developer security best practices: protecting against timing attacks

  (blog.sqreen.com)

  #security #systems

• Verifying Service Mesh TLS in Kubernetes, Using ksniff and Wireshark

  (itnext.io)

  #security #networking #kubernetes #systems

• Securing REST APIs

  (developer.okta.com)

  #API #security #REST #web

• Developing Shellcode for IoT: A Password-Protected Reverse Shell for ARM Processors

  (hackernoon.com)

  #security #IoT #Linux #systems

• Combat Side-Channel Attacks with Cross-Origin Read Blocking

  (developer.okta.com)

  #security #hardware #web

• Kubernetes security best practices

  (blog.sqreen.com)

  #devops #security #kubernetes #practices

• Top 10 security traps to avoid when migrating from a monolith to microservices

  (blog.sqreen.com)

  #software-architecture #security #microservices

• Zoncolan: How Facebook uses static analysis to detect and prevent security issues

  (engineering.fb.com)

  #security #python #systems #compilers

• Seccomp in the Elastic Stack

  (www.elastic.co)

  #DBMS #security #Linux #systems

• Article: Privacy Attacks on Machine Learning Models

  (www.infoq.com)

  #data-science #machine-learning #security #research #privacy

• Top 10 Security Best Practices for MongoDB

  (blog.sqreen.com)

  #DBMS #security #mongoDB

• Implementing Continuous Security for Microservices and Kubernetes

  (www.infoq.com)

  #security #microservices #CI-CD #kubernetes

• The Hardest Thing About Data Encryption

  (developer.okta.com)

  #security #systems #encryption

• Picture Perfect: How JPG EXIF Data Hides Malware

  (umbrella.cisco.com)

  #security #malware #systems #reverse-engineering

• How we stopped vulnerable code from landing in production

  (blog.developer.atlassian.com)

  #software-engineering #security #practices

• Container Security: A Developer Guide

  (developer.okta.com)

  #containers #security #systems

• A Tale of Two (APT) Transports

  (blog.cloudflare.com)

  #security #networking #systems #encryption

• Docker Security Considerations Part I

  (www.percona.com)

  #containers #docker #security #systems

• Zoncolan: How Facebook uses static analysis to detect and prevent security issues

  (code.fb.com)

  #programming-languages #security #parsing #cs-theory

• A gentle introduction to Linux Kernel fuzzing

  (blog.cloudflare.com)

  #security #Linux #kernel #systems

• Introducing CIRCL: An Advanced Cryptographic Library

  (blog.cloudflare.com)

  #security #GoLang #cryptography #encryption

• Cryptography For Software Engineers

  (hackernoon.com)

  #security #cryptography #encryption

• Key Conjurer: Our Policy of Least Privilege

  (technology.riotgames.com)

  #devops #security #AWS #access-control

• Presentation: Securing Services Using SSO

  (www.infoq.com)

  #software-architecture #security #microservices #auth

• Article: NotPetya Retrospective

  (www.infoq.com)

  #security #windows #internet #systems

• How Google adopted BeyondCorp

  (security.googleblog.com)

  #software-engineering #security #networking

• Towards Post-Quantum Cryptography in TLS

  (blog.cloudflare.com)

  #security #systems #cryptography #encryption #quantum-computing

• Helping organizations do more without collecting more data

  (security.googleblog.com)

  #security #systems #privacy

• Securing Certificate Issuance using Multipath Domain Control Validation

  (blog.cloudflare.com)

  #security #networking #internet #systems #encryption

• Podcast: Johnny Xmas on Web Security & the Anatomy of a Hack

  (www.infoq.com)

  #security #networking #web #podcast

• Another one bites the apple!

  (engineering.linecorp.com)

  #security #hardware #kernel #systems

• Protecting Project Galileo websites from HTTP attacks

  (blog.cloudflare.com)

  #monitoring #security #CDN #internet

• Introduction to Kubernetes Security

  (www.weave.works)

  #infra #devops #security #kubernetes

• Evolving to Enterprise-Grade Permissions

  (benchling.engineering)

  #software-engineering #software-design #software-architecture #security #access-control

• PHA Family Highlights: Triada

  (security.googleblog.com)

  #security #android #malware #systems

• Presentation: Powering Flexible Payments in the Cloud with Kubernetes

  (www.infoq.com)

  #software-architecture #security #microservices #kubernetes #cloud

• A Practical Guide to Building Secure SSO

  (engineering.gusto.com)

  #security #auth #web

• Building Facebook’s service encryption infrastructure

  (code.fb.com)

  #infra #security #systems #encryption

• How We Improved our Node.js Application Security Grade from F to A

  (itnext.io)

  #javascript #security #backend #web

• Empowering User Privacy and Decentralizing IoT with Mozilla WebThings

  (hacks.mozilla.org)

  #security #IoT #hardware #web #privacy

• Queue the Hardening Enhancements

  (android-developers.googleblog.com)

  #mobile #security #android #systems

• Securing Third-Party Applications at Scale

  (engineering.salesforce.com)

  #software-engineering #scaling #security #systems

• Presentation: The Evolving Practice of Security

  (www.infoq.com)

  #software-engineering #security #systems #cryptography

• Securing GitOps Pipelines

  (www.weave.works)

  #devops #security #CI-CD #git

• Presentation: Reducing Risk of Credential Compromise @Netflix

  (www.infoq.com)

  #infra #security #secrets #systems

• Shamir Secret Sharing vs Multi-sig

  (hackernoon.com)

  #security #block-chain #encryption

• The Android Platform Security Model

  (security.googleblog.com)

  #mobile #security #android #systems

• Understanding Subresource Integrity

  (www.smashingmagazine.com)

  #security #web #frontend

• The evolution of Zero Trust

  (about.gitlab.com)

  #security #networking #encryption #protocols

• Securing Developer Workflows

  (www.weave.works)

  #software-engineering #devops #security #pipeline

• How to fully leverage your pentest

  (blog.sqreen.com)

  #testing #security #networking #web

• Presentation: Fine-grained Sandboxing with V8 Isolates

  (www.infoq.com)

  #performance #security #runtime #systems #virtualisation

• BoringTun, a userspace WireGuard implementation in Rust

  (blog.cloudflare.com)

  #security #networking #systems #rust

• Presentation: Secure Isolation in Rust: Hypervisors, Containers, and the Future of Composable Infrastructure

  (www.infoq.com)

  #containers #security #systems #rust #virtualisation

• Monsters in the Middleboxes: Introducing Two New Tools for Detecting HTTPS Interception

  (blog.cloudflare.com)

  #security #networking #HTTPS #internet #encryption

• Open-sourcing Sandboxed API

  (security.googleblog.com)

  #dev-tools #security #systems

• Presentation: Developer Secure Containers for the Cyberspace Battlefield

  (www.infoq.com)

  #containers #security #cloud #systems #encryption

• Securing third-party calls by using CSRF protection

  (tech.showmax.com)

  #security #browsers #internet #web

• Presentation: The Most Secure Program Is One That Doesn’t Exist

  (www.infoq.com)

  #programming-languages #security #systems #rust

• Single-page applications need better auditing

  (blog.sqreen.com)

  #security #web #frontend

• What is Identity Infrastructure?

  (auth0.com)

  #infra #security #auth #cloud

• Ten Ways to Secure your Applications

  (blog.heroku.com)

  #software-design #security #web

• Stop the Bots: Practical Lessons in Machine Learning

  (blog.cloudflare.com)

  #machine-learning #security #bots

• User Migration: The Definitive Guide

  (developer.okta.com)

  #software-engineering #security #auth #practices #migration

• Introducing Adiantum: Encryption for the Next Billion Users

  (security.googleblog.com)

  #mobile #security #android #encryption

• Open sourcing ClusterFuzz

  (security.googleblog.com)

  #software-engineering #testing #automation #security

• Distributed PKI: Development and Use Cases

  (hackernoon.com)

  #security #systems #encryption

• How Radix trees made blocking IPs 5000 times faster

  (blog.sqreen.io)

  #software-design #algorithms #security #networking

• TLS Fingerprinting with JA3 and JA3S

  (engineering.salesforce.com)

  #security #networking #systems #encryption

• Managing Secrets in Kubernetes

  (www.weave.works)

  #devops #security #secrets #kubernetes

• PHA Family Highlights: Zen and its cousins

  (security.googleblog.com)

  #machine-learning #mobile #security #android

• Reverse Engineering an Obfuscated Malicious Macro

  (medium.com)

  #security #systems #reverse-engineering

• Keep your infrastructure keys safe with Vault

  (blog.octo.com)

  #security #auth #cloud #access-control

• Presentation: Connecting, Managing, Observing, and Securing Services

  (www.infoq.com)

  #software-architecture #security #microservices #best-practices

• Presentation: Securing Microservices in Hybrid Cloud

  (www.infoq.com)

  #security #microservices #auth #backend #cloud

• DNS over TLS: Encrypting DNS end-to-end

  (code.fb.com)

  #security #networking #DNS #internet

• Android Pie à la mode: Security & Privacy

  (android-developers.googleblog.com)

  #mobile #security #android #systems

• Security Considerations for Container Runtimes

  (developers.redhat.com)

  #containers #security #Linux #systems

• Scaling secure tunnels for browser testing

  (medium.com)

  #software-architecture #testing #automation #security

• Protecting Your Site With Feature Policy

  (www.smashingmagazine.com)

  #security #web #frontend

• Netflix Information Security: Preventing Credential Compromise in AWS

  (medium.com)

  #software-architecture #security #networking #AWS #cloud

• Everything You Ever Wanted To Know About Authentication at Artsy (But Didn't Know How To Ask)

  (artsy.github.io)

  #security #auth #jwt #tokens

• L4Drop: XDP DDoS Mitigations

  (blog.cloudflare.com)

  #scaling #security #networking #DDoS

• 5 Ways To Hack An API (And How To Defend)

  (nordicapis.com)

  #API #security #backend #hacking

• TTL as a Service: Automatic Revocation of Stale Privileges

  (engineeringblog.yelp.com)

  #software-engineering #software-design #security #access-control

• Offensive testing to make Dropbox (and the world) a safer place

  (blogs.dropbox.com)

  #testing #security #systems #privacy

• Combating Potentially Harmful Applications with Machine Learning at Google: Datasets and Models

  (android-developers.googleblog.com)

  #machine-learning #mobile #security #systems

• Sinkholing - Face the Threat, Beat the Threat

  (tech.showmax.com)

  #security #backend #access-control #systems

• Private by Design: How we built Firefox Sync

  (hacks.mozilla.org)

  #software-architecture #security #browsers

• Cloud Computing without Containers

  (blog.cloudflare.com)

  #security #serverless #cloud #systems

• The rise of multivector DDoS attacks

  (blog.cloudflare.com)

  #security #networking #DDoS #internet

• Three Simple Rules for Putting Secrets into Git

  (engineering.udacity.com)

  #software-engineering #security #secrets #git

• Presentation: Making Security Usable: Product Engineer Perspective

  (www.infoq.com)

  #software-engineering #security #encryption

• How S3 Signed URLs work

  (advancedweb.hu)

  #security #AWS #access-control

• Sharing Secrets with GPG

  (8thlight.com)

  #security #cryptography #encryption #GPG

• A tour through the OWASP Top 10

  (auth0.com)

  #security #auth #web #encryption

• Stolen Access Tokens and You

  (developer.okta.com)

  #API #security #auth #practices

• Enabling ECC on PC Engines platforms

  (3mdeb.com)

  #security #hardware #systems

• Building a Titan: Better security through a tiny chip

  (android-developers.googleblog.com)

  #mobile #security #hardware #embedded

• SqR00t Offensive Security Tech Talks

  (medium.com)

  #security #systems #web #privacy

• Client Side Encryption in Firebase Database and Storage

  (hackernoon.com)

  #security #backend #frontend #encryption

• VBA Stomping — Advanced Maldoc Techniques

  (medium.com)

  #security #windows #malware

• Sinkholing - Face the Threat, Beat the Threat

  (tech.showmax.com)

  #software-architecture #security #backend #systems

• Machine Learning for Cybersecurity 101

  (towardsdatascience.com)

  #data-science #machine-learning #security

• Presentation: Introduction to gVisor: Sandboxed Linux Container Runtime

  (www.infoq.com)

  #containers #security #Linux #runtime

• Risk Detection Infrastructure @ Postmates

  (blog.postmates.com)

  #software-architecture #data-analytics #security

• Roughtime: Securing Time with Digital Signatures

  (blog.cloudflare.com)

  #algorithms #security #protocols

• RPKI - The required cryptographic upgrade to BGP routing

  (blog.cloudflare.com)

  #security #networking #internet

• Production Secret Management at Airbnb

  (medium.com)

  #security #secrets #production

• Scalable User Privacy

  (labs.spotify.com)

  #security #web #encryption #privacy

• Presentation: CI/CD/CS: Implementing Continuous Security Across Your Delivery Pipeline and at Run-time

  (www.infoq.com)

  #docker #security #CI-CD #cloud

• On The Nature of OAuth2’s Scopes

  (auth0.com)

  #security #auth #protocols

• Applying Seccomp Filters at Runtime for Go Binaries

  (blog.heroku.com)

  #security #Linux #GoLang #systems

• Presentation: ML Data Pipelines for Real-time Fraud Prevention @PayPal

  (www.infoq.com)

  #data-pipeline #machine-learning #security

• An OAuth 2.0 introduction for beginners

  (itnext.io)

  #software-architecture #security #auth

• WebAssembly vs. the world. Should you use WebAssembly?

  (blog.sqreen.io)

  #web-assembly #performance #security

• Explain Like I'm Five: Poison Records (Honeypots for Database Tables)

  (hackernoon.com)

  #DBMS #security

• Entering God Mode — The Kernel Space Mirroring Attack

  (hackernoon.com)

  #security #Linux #kernel #systems

• Presentation: Using Blockchain Routing to Bring Best of Breed Cybersecurity to the Masses

  (www.infoq.com)

  #security #block-chain #cryptography

• How We Improved Information Security at Grofers

  (lambda.grofers.com)

  #software-engineering #security #practices

• A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)

  (blog.cloudflare.com)

  #security #networking #web #cryptography

• Netflix Cloud Security: Detecting Credential Compromise in AWS

  (medium.com)

  #security #AWS #auth #cloud

• How to crash an email server with a single email

  (snyk.io)

  #security #backend #email

• Understanding Program Memories — from exploitation point of view

  (medium.com)

  #security #systems #hacking

• Securing New Products at Clever

  (engineering.clever.com)

  #infra #security #cloud

• Netflix SIRT releases Diffy: A Differencing Engine for Digital Forensics in the Cloud

  (medium.com)

  #infra #security #systems

• Docker Image Scanning – How to Implement Open Source Container Security (Part 2)

  (sysdig.com)

  #containers #security #systems

• How to Implement Open Source Container Security: Part 1 Runtime Security

  (sysdig.com)

  #containers #security #systems

• Mitigating Spectre with Site Isolation in Chrome

  (security.googleblog.com)

  #security #systems #privacy

• Privilege escalation

  (www.future-processing.pl)

  #security #kernel #systems #hacking

• Presentation: Unikraft - Unleashing the Power of Unikernels

  (www.infoq.com)

  #security #systems #backed #unikernel

• Responsible IoT design

  (www.oreilly.com)

  #security #IoT #hardware #privacy

• Compiler-based security mitigations in Android P

  (android-developers.googleblog.com)

  #security #android #systems #compilers

• Innovating on Authentication Standards

  (yahooeng.tumblr.com)

  #software-architecture #security #auth #web

• Malware Analysis: Kardon Loader

  (engineering.salesforce.com)

  #security #malware #systems #reverse-engineering

• Satan Ransomware Spawns New Methods to Spread

  (hackernoon.com)

  #security #malware #systems #reverse-engineering

• What Happens If Your JWT Is Stolen?

  (developer.okta.com)

  #security #jwt #tokens #web

• Malware Analysis: Decoding Emotet, Part 1

  (engineering.salesforce.com)

  #security #malware #systems #reverse-engineering

• Splitting your secrets with Shamir’s Secret Sharing Scheme

  (www.future-processing.pl)

  #security #secrets #decentralised

• Stick with security: YubiKey, SSH, GnuPG, macOS

  (evilmartians.com)

  #security #auth #2FA

• Presentation: Insecure Transit - Microservice Security

  (www.infoq.com)

  #security #microservices #backed

• Forcing a device to disconnect from WiFi using a deauthentication attack

  (hackernoon.com)

  #security #networking #auth #wifi

• A cartoon intro to DNS over HTTPS

  (hacks.mozilla.org)

  #security #HTTPS #DNS #internet

• Applying security to the Twelve-Factor App

  (hackernoon.com)

  #software-architecture #security #backend

• Keeping 2 billion Android devices safe with machine learning

  (android-developers.googleblog.com)

  #data-analytics #security #android

• Secure NPM

  (hackernoon.com)

  #security #npm

• Stepping Towards a Password-Free World

  (www.ebayinc.com)

  #security #auth

• The web is broken; let’s fix it

  (www.oreilly.com)

  #security #web #privacy #podcast

• Binary Exploitation ELI5– Part 1

  (hackernoon.com)

  #security #systems #hacking #reverse-engineering

• Kubernetes Security Guide, Chapter 3. Securing Kubernetes components: kubelet, etcd and Docker registry

  (sysdig.com)

  #docker #security #kubernetes #systems

• BGP leaks and cryptocurrencies

  (blog.cloudflare.com)

  #security #networking #bitcoin

• 10 tips to power-up your Java security

  (medium.com)

  #javascript #security #frontend

• Towards unprivileged container builds

  (kinvolk.io)

  #containers #docker #security #systems

• Web Security for Single Page Applications: great impact with little effort

  (techblog.commercetools.com)

  #security #frontend #SPA

• Active Directory Password Blacklisting

  (engineeringblog.yelp.com)

  #security #auth #IT

• Common Threats in Web Application Security

  (auth0.com)

  #security #web #frontend

• How JavaScript Works: Inside the Networking Layer + How to Optimize Its Performance and Security

  (blog.sessionstack.com)

  #javascript #performance #security #internals

• A Look at The Draft for JWT Best Current Practices

  (auth0.com)

  #security #jwt #tokens

• Kubernetes Security guide

  (sysdig.com)

  #devops #security #kubernetes

• QuantLoader: An In-Depth Malware Analysis

  (engineering.salesforce.com)

  #security #malware #systems #reverse-engineering

• Using CD with machine learning models to tackle fraud

  (www.thoughtworks.com)

  #machine-learning #security #classifier

• A Solution to Compression Oracles on the Web

  (blog.cloudflare.com)

  #security #CDN #compression #web

• A House of Cards: An Exploration of Security When Building Docker Containers

  (blog.heroku.com)

  #containers #docker #security #systems

• Buffer overflow in PJSIP, a VoIP open source library

  (engineering.linecorp.com)

  #security #systems #voip

• What devs need to know about Encoding / Encryption / Hashing / Salting / Stretching

  (hackernoon.com)

  #security #auth #encryption

• The dramatic impersonation : a developer horror tale

  (hackernoon.com)

  #security #auth #internet #web

• Mechanisms Securing Blockchain Data

  (towardsdatascience.com)

  #security #block-chain

• How Developers got Password Security so Wrong

  (blog.cloudflare.com)

  #security #auth #history

• Validating Leaked Passwords with k-Anonymity

  (blog.cloudflare.com)

  #security #cryptography

• What every web app developer must know about security

  (medium.com)

  #security #web

• A technical deep dive on Meltdown and does it work?

  (hackernoon.com)

  #security #hardware #systems

• Integrating continuous testing for improved open source security

  (www.oreilly.com)

  #security #CI-CD #opensource

• Be fast, be secure, be accessible

  (www.oreilly.com)

  #performance #security #web

• Mitigating known security risks in open source libraries

  (www.oreilly.com)

  #software-engineering #security #opensource

• Improving security of your web application with Security Headers

  (www.future-processing.pl)

  #security #http #web

• ProxySQL Firewalling

  (www.percona.com)

  #security #SQL #firewall

• Finding vulnerable open source packages

  (www.oreilly.com)

  #security #opensource

• However improbable: The story of a processor bug

  (blog.cloudflare.com)

  #debugging #security #hardware #systems

• How machine learning can be used to write more secure computer programs

  (www.oreilly.com)

  #machine-learning #programming-languages #security #research #podcast

• Exploiting Spectre with Deep learning

  (hackernoon.com)

  #machine-learning #security #tensor-flow #systems

• Concolic Execution and Code Coverage with Triton

  (engineering.salesforce.com)

  #security #systems #reverse-engineering

• The Spectre of the Zygote

  (hackernoon.com)

  #mobile #security #android #systems

• Cloud Native Part 6: Security

  (blog.codeship.com)

  #containers #security #cloud

• An Explanation of the Meltdown/Spectre Bugs for a Non-Technical Audience

  (blog.cloudflare.com)

  #security #hardware #systems

• WebSpellChecker Stack Buffer Overflow

  (engineering.salesforce.com)

  #debugging #security #systems

• I’m harvesting credit card numbers and passwords from your site. Here’s how.

  (hackernoon.com)

  #javascript #security #web #npm

• Dealing with the Meltdown patch at Grab

  (engineering.grab.com)

  #performance #security #hardware #systems

• Today's CPU vulnerability: what you need to know

  (security.googleblog.com)

  #security #hardware #systems

• Fishing for Hackers 2 – Kubernetes Boogaloo

  (sysdig.com)

  #monitoring #infra #security #backend

• Meraki RCE: When Red Team and Vulnerability Research fell in love

  (engineering.salesforce.com)

  #security #hardware #systems

• How "expensive" is crypto anyway?

  (blog.cloudflare.com)

  #security #internet #encryption

• TLS 1.3 is going to save us all, and other reasons why IoT is still insecure

  (blog.cloudflare.com)

  #security #IoT #internet #encryption

• Revolution and Evolution: Fully Homomorphic Encryption

  (galois.com)

  #security #web #encryption

• Keeping Yelp two steps ahead: How we built GSET to protect employee email

  (engineeringblog.yelp.com)

  #software-design #security #email

• Mounting Mining Mayhem

  (umbrella.cisco.com)

  #security #block-chain #browsers

• Security for Static Websites

  (blog.sqreen.io)

  #security #web

• Inside the infamous Mirai IoT Botnet: A Retrospective Analysis

  (blog.cloudflare.com)

  #security #IoT #DDoS #botnet

• Securing communications between Google services with Application Layer Transport Security

  (security.googleblog.com)

  #security #RPC #research

• The Definitive Guide to Container Security Terminology

  (sysdig.com)

  #containers #security #systems

• Securing Medical IoT Devices

  (nordicapis.com)

  #security #IoT #hardware #biotech

• Why Some Phishing Emails Are Mysteriously Disappearing

  (blog.cloudflare.com)

  #security #CDN #email

• How RSA Works: TLS Foundations

  (fly.io)

  #security #networking #web #encryption

• DDoS Attack Detection with Wallaroo: A Real-time Time Series Analysis Example

  (blog.wallaroolabs.com)

  #data-analytics #security #python #DDoS

• The Evolution of Security at Riot

  (engineering.riotgames.com)

  #infra #security #backend #cloud

• Kubernetes Security: How to harden internal kube-system services

  (sysdig.com)

  #containers #security #microservices #kubernetes

• Better security by design

  (www.thoughtworks.com)

  #software-engineering #security #app-design #UX

• Securing Webtasks Part 2: Using Middleware

  (auth0.com)

  #security #serverless #backend

• Malware Detection in Executables Using Neural Networks

  (devblogs.nvidia.com)

  #security #neural-net #malware #research

• Thwarting the Tactics of the Equifax Attackers

  (blog.cloudflare.com)

  #security #systems #privacy

• Why Can’t I Just Send JWTs Without OAuth?

  (nordicapis.com)

  #security #auth #jwt #web

• Creating Secure Password Resets With JSON Web Tokens

  (www.smashingmagazine.com)

  #nodeJS #security #web

• Privacy Pass - “The Math”

  (blog.cloudflare.com)

  #security #internet #cryptography

• Safer SWIFT – Moving the security game to the level of programming languages

  (www.novoda.com)

  #swift #programming-languages #security

• Is Your Security Scaling Up Along with Your Operation?

  (airbrake.io)

  #security #web #introduction

• Explain Like I’m 5: Zero Knowledge Proof (Halloween Edition)

  (hackernoon.com)

  #security #encryption #zero-knowledge

• Many-faced threats to Serverless security

  (hackernoon.com)

  #security #serverless #backend #cloud

• OAuth 2.0 Best Practices for Native Apps

  (auth0.com)

  #mobile #security #auth

• Building Application Backends with End-to-end Encryption

  (hackernoon.com)

  #security #backend #access-control #cryptography

• WPA2 KRACK Attack: The WiFi Hack and What it Means

  (auth0.com)

  #security #networking #cryptography #wifi

• Dangerous Pickles — Malicious Python Serialization

  (intoli.com)

  #security #python #serialization

• An Overview of the Security Ecosystem in Programming

  (blog.codeship.com)

  #software-engineering #security #practices

• SAST, DAST, and RASP: A guide to the new security alphabet soup

  (blog.sqreen.io)

  #security #cryptography

• App Security: Introducing Cross-Site Scripting

  (fly.io)

  #security #web #frontend

• Protect your npm account with 2FA and Authy

  (twilioinc.wpengine.com)

  #security #auth #npm #2FA

• Securing Webtasks Part 1: Shared Secret Authorization

  (auth0.com)

  #security #serverless #auth

• Behind the Masq: Yet more DNS, and DHCP, vulnerabilities

  (security.googleblog.com)

  #security #networking #DNS

• Everything You Ever Wanted to Know About Secure HTML Forms

  (twilioinc.wpengine.com)

  #security #HTML #web #frontend

• Securing Services for Kubernetes on AWS

  (code.hootsuite.com)

  #security #auth #kubernetes #access-control

• Protecting ICOs and cryptocurrency users

  (umbrella.cisco.com)

  #security #DNS #cryptography #bitcoin

• Geo Key Manager: How It Works

  (blog.cloudflare.com)

  #software-design #infra #security #networking

• Meet Gatebot - a bot that allows us to sleep

  (blog.cloudflare.com)

  #monitoring #security #networking #DDoS

• How does it work? Docker! Part 3: Load balancing, service discovery and security!

  (blog.octo.com)

  #docker #security #distributed-systems #microservices

• Poison Packages in Python

  (blog.sqreen.io)

  #security #python

• Stepping Up the Cloud Security Game

  (labs.spotify.com)

  #infra #security #auth #cloud

• Building Account Systems

  (auth0.com)

  #security #auth #access-control #best-practices

• Understanding the prevalence of web traffic interception

  (blog.cloudflare.com)

  #security #networking #HTTPS #encryption

• JavaScript for Microcontrollers and IoT: SSL/TLS

  (auth0.com)

  #javascript #security #IoT #hardware

• Declaratively securing REST APIs to specific clients

  (engineering.monsanto.com)

  #API #security #REST #web

• SIDH in Go for quantum-resistant TLS 1.3

  (blog.cloudflare.com)

  #algorithms #security #cryptography #quantum-computing

• A Simple, Secure Tool for One-time (Self-Destructing) Messages

  (blog.algolia.com)

  #security #access-control #encryption

• Detecting and blocking bad bots

  (blog.sqreen.io)

  #security #backend #bots

• Hardening the Kernel in Android Oreo

  (android-developers.googleblog.com)

  #mobile #security #android #systems

• The WireX Botnet: How Industry Collaboration Disrupted a DDoS Attack

  (blog.cloudflare.com)

  #security #CDN #networking #DDoS

• Getting Started with the SRVB Cryptosystem

  (www.toptal.com)

  #security #cryptography

• 7 Docker security vulnerabilities and threats

  (sysdig.com)

  #docker #security

• Learnings from the last Huddle: Cybersecurity

  (engineering.zomato.com)

  #software-engineering #security #best-practices

• Identity and Access Management (IAM) in the aftermath of NotPetya

  (developer.ibm.com)

  #security #auth #access-control #enterprise

• Find projects infected by malicious npm packages

  (twilioinc.wpengine.com)

  #security #malware

• 2016 Social, Passwordless and SSO Data: What Can We Learn?

  (auth0.com)

  #security #auth #analytics #trends

• Open Sourcing Jaqen, A Tool For Developing DNS Rebinding PoCs

  (engineering.linkedin.com)

  #security #DNS

• Starting the Avalanche

  (medium.com)

  #software-architecture #security #microservices #DDoS

• Protecting a Spring Boot App with Apache Shiro

  (developer.okta.com)

  #security #java #auth #api-backend

• Securing W Magazine: Our Migration to HTTPS

  (technology.condenast.com)

  #infra #security #HTTPS

• High-reliability OCSP stapling and why it matters

  (blog.cloudflare.com)

  #software-architecture #infra #web-backend #security

• Remote device sign-in

  (developers.soundcloud.com)

  #software-design #security #auth

• A container identity bootstrapping tool

  (blog.cloudflare.com)

  #dev-tools #containers #docker #security

• Building a privacy-preserving architecture with less server trust

  (www.thoughtworks.com)

  #software-design #security

• Hacking Blockchain

  (capgemini.github.io)

  #security #distributed-systems #block-chain

• Stupidly Simple DDoS Protocol (SSDP) generates 100 Gbps DDoS

  (blog.cloudflare.com)

  #infra #web-backend #security #CDN