Tag: Security and privacy
-
How to keep docker secrets secure: Complete guide
Posted on May 29, 2023, Level intermediate Resource Length medium
Secret values such as API keys, passwords, and certificates need to be safely handled throughout the software development process and your app's runtime. Exposure of secrets can be catastrophic, as unauthorized actors could use the credentials to perform privileged interactions with your services. By James Walker.
Tags devops-and-ci-cd security-and-privacy cloud-and-infrastructure
-
Achieving unbrickable remote firmware updates on MCUs with a Microvisor architecture
Posted on May 16, 2023, Level intermediate Resource Length medium
For many years, microcontrollers have been a staple in various products, continuously revolutionizing their feature sets, reliability, and performance. Moore's Law has brought 16- and 32-bit processing to even the smallest and most affordable consumer products. The presence of larger memory and CPU power has allowed the use of real-time operating systems (RTOS) where previously developers had to rely on "bare metal" coding. However, as products have evolved to become connected devices in the context of IoT, it has revealed fundamental shortcomings in the traditional methods of software development for microcontrollers. By Jonathan Williams.
Tags data-and-analytics business-and-emerging-tech cloud-and-infrastructure security-and-privacy
-
How to enable HSTS for enhanced web security in Apache
Posted on May 13, 2023, Level intermediate Resource Length medium
HTTP Strict Transport Security (HSTS) is a web security policy mechanism that helps to protect websites against protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers (or other complying user agents) should interact with it using only secure HTTPS connections, and never via the insecure HTTP protocol. This article will guide you on how to implement and optimize HSTS in Apache for improved web security. By Rahul.
Tags product-and-design security-and-privacy frontend-and-mobile data-and-analytics
-
From 'Likes' to 'Rewards': How web3 is disrupting traditional social media model
Posted on May 12, 2023, Level beginner Resource Length medium
Over the past decade, social media platforms have revolutionized social interactions for people looking to connect with friends, family, and like-minded individuals and communities. Since the dawn of MySpace and Facebook, social media has provided us with an unprecedented level of connectivity and has opened up a world of opportunities for businesses to connect with their customers. However, with the rise of Web3, traditional social media platforms are being forced to rethink their models in order to stay relevant in a rapidly evolving digital landscape. By chain.com.
Tags frontend-and-mobile security-and-privacy business-and-emerging-tech leadership-and-career miscellaneous
-
Dissecting Npm malware: Five packages and their evil install scripts
Posted on May 11, 2023, Level intermediate Resource Length medium
Packages published on npm can declare pre and post-install hooks, which are scripts that run, well, pre or post-install. That is to say, when the npm CLI installs a package, it also runs those scripts on your machine. By Gabi Dobocan.
Tags product-and-design security-and-privacy frontend-and-mobile backend-development
-
How to add a Software Bill of Materials (SBOM) to your containers with GitHub Actions
Posted on May 9, 2023, Level intermediate Resource Length medium
Learn how to add a Software Bill of Materials (SBOM) to your containers with GitHub Actions in a few easy steps. An SBOM is an inventory of the components that make up a software application. It is a list of the components that make up a software application including the version of each component. The version is important because it can be cross-reference with a vulnerability database to determine if the component has any known vulnerabilities. By Alex Ellis.
Tags devops-and-ci-cd security-and-privacy
-
How to use Ansible to create reports with Lynis, automate audits, and evaluate the security of your systems
Posted on April 29, 2023, Level intermediate Resource Length medium
From the server administrators of highly technological organizations, to product managers of financial institutions, down to the one-man startups that just want to secure their shopping cart, the same question pops up: "If TLS/SSL certificates all do the same thing, what type should we get?" By Digicert.
Tags devops-and-ci-cd cloud-and-infrastructure security-and-privacy
-
How to choose the right type of TLS/SSL certificate
Posted on April 28, 2023, Level beginner Resource Length medium
From the server administrators of highly technological organizations, to product managers of financial institutions, down to the one-man startups that just want to secure their shopping cart, the same question pops up: "If TLS/SSL certificates all do the same thing, what type should we get?" By Digicert.
Tags security-and-privacy cloud-and-infrastructure leadership-and-career product-and-design
-
Cilium Mesh – One mesh to connect them all
Posted on April 23, 2023, Level beginner Resource Length medium
Cilium has rapidly become the standard in Kubernetes networking thanks due to its advanced security, performance, and exceptional scalability. With the increase in the adoption of Cilium, more and more customers have requested to bring Cilium to the world of virtual machines and servers. By Thomas Graf.
Tags product-and-design devops-and-ci-cd security-and-privacy
-
How to connect to MySQL remotely with SSH PuTTY Tunnels: A step-by-step guide
Posted on April 6, 2023, Level beginner Resource Length long
MySQL is a popular relational database management system to organize and store data. Depending on your specific use cases and preferences, you can connect to a MySQL Server through a command-line interface, using GUI tools,such as dbForge Studio for MySQL, programming languages or via web-based interfaces such as phpMyAdmin. By Julia Evans.
Tags security-and-privacy cloud-and-infrastructure devops-and-ci-cd data-and-analytics
-
Intrusion detection network – Protecting from cyber attacks
Posted on March 19, 2023, Level intermediate Resource Length medium
As cyber threats continue to evolve, it's essential for businesses to have systems in place to protect against attacks. One important tool in the cybersecurity toolkit is an intrusion detection network (IDN). By Priyanshu Sahay.
Tags security-and-privacy cloud-and-infrastructure leadership-and-career miscellaneous how-to
-
NGINX tutorial: How to securely manage secrets in containers
Posted on March 17, 2023, Level intermediate Resource Length medium
Many of your microservices need secrets to operate securely. Examples of secrets include the private key for an SSL/TLS certificate, an API key to authenticate to another service, or an SSH key for remote login. Proper secrets management requires strictly limiting the contexts where secrets are used to only the places they need to be and preventing secrets from being accessed except when needed. By Robert Haynes of F5.
Tags devops-and-ci-cd security-and-privacy