403forbiddenblog.blogspot.com
atom
kelly kaoudis
403forbiddenblog.blogspot.com · English
kelly kaoudis: application security, hacking, software engineering blog
atom gd openSearch thr
https://403forbiddenblog.blogspot.com/feeds/posts/default
- Last post
- Sep 15, 2022
- Posts in 24 h · 7 days · 30 days
- 0 · 0 · 0
- Our last check
- Answering
- Served from
- United States
- Format
- atom
- Features in the feed
- gd, openSearch, thr
Posts
What our queue read from this feed. Open one to read it here, or go to the site that published it.
- Request forgery in node by example
Sep 15, 2022 · original
pLet me start by saying I've been writing Javascript on and off since the early 2000s but I definitely don't consider myself an expert in it, particularly given the rapid iteration of JS best practices and uses./ppSomewhere between the end of 2020 and mid 2021 I started building an intentionally awful sketch toy app wh - Starting with threat modeling for the devop or developer
Oct 3, 2021 · original
pNot every company is lucky enough to have enough appsec or even infosec folks that a security staffer can threat model ieverything. /iYou're on an engineering team who own some services and you've been told by security that you should a href="https://owasp.org/www-community/Threat_Modeling"threat model/a your system; - Signal safety number privacy issues
Jun 4, 2021 · original
h3 style="text-align: left;"Credit/h3ul style="text-align: left;"libKelly Kaoudis/b a href="https://twitter.com/kaoudis"twitter/a, a href="https://github.com/kaoudis"github/ab /b/lilibJohn Jackson/b a href="https://twitter.com/johnjhacking"twitter/ab /b/lilibSick Codes/b a href="https://twitter.com/sickcodes" - Adventures in Systemd-Linux-Dockerland
Apr 4, 2021 · original
pI am just recently starting to use Docker again after an iabout/i six year hiatus from it (used regularly ~2014-2015). I do not recommend following the actions I document here in any way, shape, or form, but wanted to chronicle them in case it's educational for others, or in case I don't use Docker again until 2030 an - Resume antipatterns
Mar 24, 2021 · original
pI get to look at a lot of resumes as part of my job. Each of these represents a thinking, feeling human being, but after awhile it is ivery hard /inot to get picky about what makes it easier for people who don't have a lot of time to spend reading your document to digest it and get the information they need.br //ppThi - Oncall dysfunctions
Feb 4, 2021 · original
pThe main idea of having an oncall, as I understand it, is to share the burden of interruptish operations work so no one human on the team is a single point of failure. I have so far encountered several kinds of dysfunction in implementations of "oncall rotation" and would like to provide some ideas for other folks in
Discovered by the rss-feed-index crawler, which checks each feed at most once a month.
Same record as JSON: https://api.agentalog.com/api/feeds/fd_403forbiddenblog_blogspot_com_33ed0051444389f9. More from this site: 403forbiddenblog.blogspot.com in the Feeds tab.