Category - API Security Blog

1.

Make a copy of the file you want to edit in /etc/init.d and name it something else (e.g.: my_service) 2. Edit this new file, add your own code at the bottom of the script, save and exit (Ctrl+X). 3. ...

September 21, 2021

Im a software developer.

I like to work with the latest technologies, and Ive been doing that for over 20 years now. I started my career in 1995 as a C++ programmer at an insurance company, where I worked on their mainfram ...

September 21, 2021

Im a software developer and entrepreneur.

I like to build things that help people do their jobs better, and make the world a little bit better in the process. I started my professional career as an engineer at Microsoft, where I worked on Wi ...

September 21, 2021

I have a new blog post up on the topic of using the C++14 range-based for loop.

Its called C++14 Ranges: The Good Parts and it covers some of the best parts about ranges, including their use in algorithms like std::copy . You can read it here https://t.co/U09QukYJub ...

September 21, 2021

SAST tools are not designed for API-centric applications API security is a different ball game to web application security The OWASP Top 10 list of vulnerabilities for APIs includes: Cross Site Request Forgery (CSRF) Broken Authentication and Session Management Insecure Direct Object References Sensitive Data Exposure Exposed Debug Information Security Misconfiguration Unvalidated Redirects and Forwards Using Components with Known Vulnerabilities Insufficient Transport Layer Protection.

These are all very similar to the OWASP Top 10 list of vulnerabilities for web applications, but there are some notable differences https://t.co/FKRC0FUNpg ...

September 21, 2021

I’m a software engineer with experience in building web applications, mobile apps, and backend services.

I have an eye for design and am passionate about creating clean, usable interfaces. I graduated from the University of Washington in 2017 with a Bachelor's degree in Computer Science & Engineerin ...

September 21, 2021

I am not a fan of the new Facebook redesign.

I have been using Facebook for years now, and I can honestly say that it has changed my life in many ways. Its helped me keep in touch with friends, family, and even people that I havent seen sinc ...

September 20, 2021

SAST tools are not designed for APIs and so cannot accurately detect vulnerabilities in them.

APIs Are Not Web Applications Web applications typically have a single entry point (typically the homepage) which is used to access all of the functionality provided by an application. This means tha ...

September 20, 2021