Collaborate Disseminate
At a high level based on the technology of event store and streaming (i.e. Apache Kafka, Amazon Kinesis, etc.) to decouple systems and make them event driven systems. I was wondering what new architectural risks this would pose such as whe… Continue reading Security Risks with Event Streaming
Many of the 3D printed houses and structures we’ve seen use concrete and are — frankly — a little underwhelming. Making big squares out of concrete isn’t that hard and …read more Continue reading 3D Printed Concrete Beam Improves Sustainability
I understand the difference between a Ring-0 rootkit and a Ring-3 rootkit, in terms of their hierarchical depth in computational models. That is kernel mode and usermode, respectively.
I am confused as to whether there is a difference betw… Continue reading Is there a difference between a bootkit and a ring-0 rootkit?
I am woking on a project where I need to build a blueprint security model for a proxy that should mediate and handle communication between two computers. Because this is a first for me, I don’t have a lot information about "security m… Continue reading How do you build a good security model for a proxy?
A problem facing architects when designing complex three-dimensional structures lies in their joints, which must be strong enough to take the loads and vector forces applied by the structure, yet …read more Continue reading Tree Forks As Natural Composite Joints In Architecture
I am woking on a project where I need to build a blueprint security model for a proxy that should mediate and handle communication between two computers. Because this is a first for me, I don’t have a lot information about "security m… Continue reading How do you build a good security model for a proxy?
I am currently implementing a new network with different segments. The separation of those segments is achieved using VLANs. To enable some segments to communicate with each other and to be reached from the internet, a firewall is planned…. Continue reading Network Segmentation – Single Firewall VM vs Multiple
I have an architecture which requires a certain subset of data to be more heavily secured and encrypted. The main parameters which I believe meet the scope of the project are as follows:
Data should be encrypted in transit
Data should be … Continue reading End To End Encryption Model
I’m trying to detect refresh token reuse / replay.
A typical approach:
send refresh token (on login or refresh)
create refresh token as opaque value (e.g. buffer from a CSPRNG)
base64 encode value and send to user
salt and hash value, st… Continue reading Refresh token replay detection
I am looking to create a brand new authentication service that follows the OpenId connect protocol. I would like to use a username/password combination for the authentication and the authorization grant, I’m curious what the downsides are … Continue reading Using a spa login page for authentication in a openId connect servic