Collaborate Disseminate
Let’s say I’m building a system, similar to a very simple ecommerce.
Users can sign up as consumer and start buying products.
Purchases are then stored in the database together with the order status, shipping info, etc.
Now, in order to ma… Continue reading In a system architecture, to what extent an admin user should have access to consumer resources?
I need to implement a web application consisting of the components
FE (Nginx + React.js)
BE (Java SpringBoot)
DB (MySQL)
For simplicity we will assume that the DB runs in localhost on BE’s machine.
From an architectural point of view, I … Continue reading Is there a real gain in terms of security by not using a reverse proxy?
We love LEGO here at Hackaday, but did you know that LEGO spun off a parallel product line made for architectural models called Modulex? [Peter Dibble] takes us on a …read more Continue reading Modulex is LEGO’s Long Lost Cousin
As we all know, never trust the client, when they send data to your server. However what if you prevent data manipulation by completely restructuring the architecture to something like the following:
Here as soon as the User tries to conn… Continue reading Prevention of User Tampering the API by Serverless clients which are in sync with the real world client
Just because you’re a monk doesn’t mean you can’t use CAD. The Carmelite monks of Wyoming are building a grandiose Gothic Monastery, and it’s awe inspiring how they are managing …read more Continue reading A medieval Gothic Monastery built using CAD / CAM
We have a situation where we have an architecture that calls for a Web based UI for querying some data and the data input is through rsync over SSH. I think it would be easier to manage and more secure if we just tunnel SSH through HTTPS s… Continue reading SSH over HTTPS or Directly open Non Standard port
i extracted a file from a .JPEG with outguess the file extension is .data i tried to identify the file type but the result is application/octet-stream and i can’t figure which extension is it even with file command or online file identifi… Continue reading can’t detect the archtitcture of a file [migrated]
What are the patterns (best practices, whatever) to prevent brute force (and features alike) in stateless API architectures that keep the system stateless? Couldn’t find anything regarding this topic.
I want to keep the system stateless to… Continue reading Brute force prevention and alike with stateless API architecture
We’re guessing that among Hackaday’s readership are plenty of futurists, and while the past might be the wrong direction in which to look when considering futurism, we wouldn’t blame any …read more Continue reading Buy the Right to Build a Nakagin Tower Anywhere
At a high level based on the technology of event store and streaming (i.e. Apache Kafka, Amazon Kinesis, etc.) to decouple systems and make them event driven systems. I was wondering what new architectural risks this would pose such as whe… Continue reading Security Risks with Event Streaming