I love code and protecting people.
Introduction Although it's debatable whether or not most tech employees "care" about security of customer data and product security, I haven't been able to get anyone to tell me in writing that they don't. Verbal claims aren't generally very useful i...
One thing I've come to learn in my journey as a computer programmer, is that programming is highly subjective. It isn't necessarily subjective by necessity, but the manifestation of it as it is in 2019 is with things like the so-called "Social Coding...
Tutorials are great. We all love them and they help so much. But always double-check code you learn to write from a tutorial because there is no guarantee that they are free from bugs or even complete. Some authors post a disclaimer while others do n...
Many of you have seen it at some point during your development career - you need to implement some security-related feature in an app and then you start ferociously searching the web for terms like "How to properly encrypt a password," "How to obfusc...
I've begun compiling a list of resources to answer the question "How do I secure my app?" It works by going to the page, finding your technology stack using Ctrl+F or Cmd+F and then visiting the resources. All resources have the top most common pitfa...
Some of the very younger audience may not remember, but most of us can probably remember the good ole' myBB, phpBB, that perl-based cgi forum, and good ole' gold standard vBulletin back in the day... Forums, or "message boards" as they were called - ...
I've written several articles on Hashnode recently about the importance of HTTP Security Headers and how so many sites lack the proper security HTTP header configurations. In this post, I will briefly go over what security headers are and what they a...
Introduction I heard a lot about kindness lately. Everyone is talking about how everyone else should just always be "nice" to one another. In fact, I've found it entertaining how preoccupied so many people seem to be with how other people should be a...
Last week, I wrote an article here on my blog about securing your site's HTTP headers. In the case of my blog, setting the headers took only about 30-40 minutes total to gain complete security coverage. However, not all websites are my blog. What I'...
