
I’ve become increasingly interested in web application security issues over the last year or so. Working in Government will do that to you. And I’ve come...
0 replies - 1783 views - 04/24/13 by Gareth Rushgrove in Articles

The history of computer systems is also the history of bugs, including epic, disastrous bugs that have caused millions of $ in damage and destruction and even...
1 replies - 12696 views - 04/22/13 by Jim Bird in Articles

You know how security people get all uppity about SSL this and SSL that? Stuff like posting creds over HTTPS isn’t enough, you have to load login forms...
0 replies - 3562 views - 04/18/13 by Troy Hunt in Articles

Transport Layer Security (TLS) 1.0 / Secure Sockets Layer (SSL) 3.0,
is the mechanism to provide private, secured and reliable communication
over the...
0 replies - 3915 views - 04/17/13 by Mainak Goswami in Articles

As you probably know, Mule provides pretty good support for PGPencryption (check the related links for further info on Mule’s PGP support). What we’re...
0 replies - 718 views - 03/31/13 by Mariano Gonzalez in Articles

WTFM - Write the F*cking Manual Actually
authoring software product/website manuals will not only help you
understand the product better, but more...
0 replies - 2864 views - 03/11/13 by Mitch Pronschinske in Articles

So twitter’s oauth keys have leaked. What does that mean? Don’t panic. The consequences of a client application’s key being compromised is as serious as...
0 replies - 2371 views - 03/10/13 by Francois Lascelles in Articles

How can developers safely rely on third-party web services without
sacrificing their own SLA? Once you start using an API, you must monitor
it....
0 replies - 1098 views - 03/01/13 by Francois Zaninotto in Articles

Here's an important question in the world of APIs: Presume that you would like to create a remote API (which perhaps exposes some legacy business logic) for...
0 replies - 4530 views - 02/27/13 by Reza Shafii in Articles

This a symmetric encryption primer for PHP: you'll learn how to call the mcrypt API to encrypt and decrypt strings, using a single key in both processes.The...
0 replies - 1552 views - 02/25/13 by Giorgio Sironi in Articles

ScaleBase Overview – Your complete scale out partner
Watch the Video below to learn how to scale out your MySQL Database with ScaleBase. Cost-effectively...
0 replies - 301 views - 02/22/13 by Kelley Gemma in Uncategorized

Our Best Weapon Against CISPA And Gov't Control
Now that CISPA is back on the table in the US Congress, Patrick Lambert believes it's not going to cut...
0 replies - 2679 views - 02/20/13 by Mitch Pronschinske in Articles

Service-Oriented Architectures (SOA) present unique security challenges due to loose service/application coupling and operations running across trust...
0 replies - 1760 views - 02/14/13 by Reza Shafii in Articles

Where Did The Term "Big Data" Come From The NYTimes did some deep investigating into the etymological origins of the biggest buzzword in IT right now.A...
0 replies - 2720 views - 02/14/13 by Mitch Pronschinske in Articles

SAML 2.0 Bearer Assertion Profile which is built on top of OAuth 2.0 Assertion Profile defines the use of a SAML 2.0 Bearer Assertion as a means for requesting...
0 replies - 1207 views - 02/01/13 by Prabath Siriwardena in Articles