Tag: Infosec
-
Understanding and resolving SELinux denials on Android
Posted on June 10, 2019, Level intermediate Resource Length short
An article by Harsh Shandilya on hot topic of security for Android software. SELinux is an acronym for Security-enhanced Linux. It is a security feature built into the Linux kernel that enforces access control for programs via a predefined security policy put in place by the system administrators.
Tags android app-development infosec
-
CORS tutorial: guide to cross-origin resource sharing
Posted on May 13, 2019, Level intermediate Resource Length medium
In this article you will learn all about Cross-Origin Resource Sharing, the circumstances under which it is needed, the benefits it provides, and how to configure a Node + Express application to support CORS. Written by Steve Hobbs.
Tags nodejs javascript programming infosec
-
Seven tips on Firebase security rules and the Admin SDK
Posted on March 14, 2019, Level beginner Resource Length long
Posted by Hiranya Jayathilaka and Rachel Myers this article focuses on Firebase offers security rules -- a powerful mechanism that helps enforce the security and logical correctness of your apps. The backend services use security rules to authorize and validate the requests made by client apps, and make sure they adhere to the policies that app developers have put in place.
Tags nosql infosec cloud app-development
-
Authentication at Edge with StackPath
Posted on January 22, 2019, Level beginner Resource Length long
Jason Byrne thoughts on using cloud Edge for some common tasks. As we spread our applications out into serverless microservices, what better place for our entitlement checks than on the CDN?
Tags web-development serverless apis infosec javascript
-
How to find hidden cameras and spy gear like a professional: the definitive guide
Posted on January 17, 2019, Level beginner Resource Length long
Detailed article published on senteltechsecurity.com describing the most thorough guide to detecting hidden cameras and covert spy gear that is online.
Tags miscellaneous infosec
-
Predictive Analytics: the future of digital marketing
Posted on December 9, 2018, Level beginner Resource Length long
An older blog post by Deepak Kanakaraju on hot topic of predictive analytics. As technology impacts every aspect of our lives, it is also creating an impact in predicting the future, with reasonable accuracy.
Tags big-data machine-learning analytics infosec
-
How military-style training may enhance your cybersecurity strategy
Posted on November 22, 2018, Level beginner Resource Length medium
Article by Michael Kassner about the facility offering realistic cybersecurity training modeled on the approach used by the military and first responders.
Tags ibm cloud devops infosec servers
-
How to use SSL/TLS with Node.js
Posted on November 14, 2018, Level intermediate Resource Length long
Detailed article by Almir Bijedic and Florian Rappl about setting up Node.js with SSL/TLS. Let's Encrypt works beautifully, and having an SSL-secured site is easier than ever.
Tags infosec nodejs web-development performance
-
NGINX Unit supports TLS and JavaScript apps with Node.js
Posted on November 3, 2018, Level beginner Resource Length medium
Nick Shadrin of NGINX, Inc. wrote this article about TLS and Nodejs apps support in NGINX Unit. NGINX Unit is a dynamic web and application server, designed to run applications in multiple languages. Unit is lightweight, polyglot, and dynamically configured via API.
Tags nginx programming iot devops miscellaneous nodejs javascript infosec
-
PHP encryption methods for passwords and other sensitive data
Posted on October 7, 2018, Level intermediate Resource Length long
Ashley Rich published this article about various methods of protecting sensitive data in PHP. There is a range of different encryption methods in use today, the most common being hashing, secret key encryption and public key encryption. Also in PHP 7.2+ you have cryptography extension Sodium which should simplify vastly complicated cryptography landscape.
Tags php infosec crypto
-
Encrypting vs. signing with OpenPGP. What's the difference?
Posted on October 2, 2018, Level beginner Resource Length medium
Brad Wyro thoughts on encryption versus signing with OpenPGP. OpenPGP is the most widely used email encryption standard. PGP stands for Pretty Good Privacy. In the article author helps to answer following question: how can you ensure confidential data transmitted via email is kept private?
Tags infosec crypto messaging
-
An overview of privacy in cryptocurrencies
Posted on August 16, 2018, Level beginner Resource Length long
Blog post by Richard Chen about privacy consideration when dealing with cryptocurrencies. It's no secret that privacy is an important topic in cryptocurrencies these days. Neither companies nor individuals want to publish all of their information onto a public blockchain that can be arbitrarily read without any restrictions.
Tags fintech blockchain infosec