[WIP] Thinking About Security as an Application Engineer
SecurityAI
The first major prompt for thinking about security was the unauthorized access to Times Car. Its...
#Security
6 posts
Is RLS Being Abused?
DatabaseSecurityBackend
If you use Supabase, there is no getting around Row Level Security, or RLS. Create a table, try ...
The Difference Between Authentication and Authorization
Personal researchSecurityWeb
Whenever the conversation turns to web system design or security, two words are guaranteed to sh...
HTTP Is Stateless, So How Can a Login Session Persist?
Personal researchWebSecurity
Study web development for any length of time and you will run into the line "HTTP is a stateless...
Where Should You Store Session Data? Which Option Is Actually Right?
Personal researchSecurityWeb
Suppose the requirement is to keep users logged in after closing their browser, while allowing e...
Investigating Subresource Integrity (SRI): Should You Really Add It to JavaScript from External CDNs?
SecurityWebFrontend
Browse enough code that loads JavaScript or CSS from an external CDN, and sooner or later you ru...