Collaborate Disseminate
Context
We recently added a feature that used a library whose API we misunderstood. Long story short, if user A sends a request to our web application, the library caches some result, and that result may show in a response to user B’s requ… Continue reading What is the term for data leaking from one HTTP request to another and how to prevent it?
In order to “harden” our compliance, we wanted to enforce a two-persons rule on the MySQL production database for “manual fixes”. Such “manual fixes” frequently arise due to:
Bug in the application (we are a fast company :D)
Various cust… Continue reading Two persons-rule on MySQL databases for "manual fixes"
I recently worked for a customer that showed me that all their network cables are visible. Indeed, cables were never drawn inside walls, conduits or trunks. Instead, they were “hung” on poles close to the ceiling. If a cable needed to pass… Continue reading Security standard that requires network cables to be visible for inspection
PrivateSky is a website that promises encrypted “cloud-like” secure information exchange. They promise that except the sender and receiver, nobody can see your data. After testing it yesterday, I do not understand how this is possible.