A technical guide to building and enhancing a secure, accessible login form with HTML validation, security best practices, and UX improvements.
A tutorial on implementing a custom HTTP Basic authentication scheme within the ASP.NET Core 2.0 authentication framework.
A survey asking readers about their patching status for the Meltdown and Spectre CPU security vulnerabilities, with results shared.
Analysis of the Meltdown/Spectre processor flaws and their critical impact on SQL Server deployments, security, and performance.
Analyzes the recent panic over npm security, arguing it's based on social engineering in PRs, not a flaw in npm itself.
Argues against abandoning Firefox over recent controversies, comparing privacy implications of switching to Chrome/Chromium or using forks.
Explains implementing Separation of Duties and role-based security in SQL Server for data protection, focusing on Least Privilege principles.
A guide to using NoScript 10.x in Firefox, covering its new UI, trust levels, and configuration for privacy and security.
A guide to applying authorization globally in ASP.NET Core, covering single-policy and multi-policy scenarios using filters and conventions.
Argues that memory unsafety is a widespread, unnamed vulnerability causing thousands of bugs, and advocates for adopting memory-safe languages like Rust.
A technical guide on creating a Hashicorp Vault authentication token with permissions only to seal the vault, including policy creation and token generation.
A quick guide on using PowerShell to change the friendly name of a certificate, highlighting a simple command for system administrators.
Five practical security and usability improvements for the Django Admin interface, including URL changes, environment indicators, and 2FA.
A guide to building a dedicated homelab server for running development VMs, covering the benefits of isolation and hardware selection.
Explains why forward secrecy is crucial for modern encryption, contrasting GPG's long-term key model with the Signal Protocol's ephemeral keys.
A developer tracks HTTP vs HTTPS requests for a year, highlighting major websites still using insecure HTTP and advocating for HTTPS adoption.
A reflection on teaching basic cryptography to children, highlighting the importance of usable security through historical ciphers like the rail fence and Caesar cipher.
Discusses the importance of cryptographic safety factors, using SHA1's vulnerabilities and Feynman's Challenger report as analogies.
A guide on protecting API keys in Python applications by storing them in a separate config file and using .gitignore to prevent exposure on GitHub.
A guide to implementing HTTP Public Key Pinning (HPKP) for enhanced security in ASP.NET Core applications, covering benefits and risks.
