Category - API Security Blog

I have a lot of problems with this book.

I'm not sure if it's the writing, or the plot, or just my own personal taste. But there are some things that really bothered me about this book. The first thing is that I didn't like any of the cha ...

September 03, 2021

Don’t use GraphQL in production without a security review.

2. Parsing a GraphQL Operation vs. parsing an SQL query# Why? Why is GraphQL so much more vulnerable than e.g. MySQL? Let's compare the antlr grammar for parsing an SQL query against the one for pars ...

September 03, 2021

The most important thing is to be able to get the ball in play.

If you can do that, then it doesnt matter if you have a driver or a putter. It just matters how far you hit each club and what your strategy is for getting around the course. The best players are th ...

September 03, 2021

Im not sure what to make of this.

It seems like it could be a useful tool, but I dont know if the benefits outweigh the costs https://t.co/RzbfQlfFeO ...

September 03, 2021

The EO is a good start, but its not enough.

The next step should be to expand the scope of SBOMs and ATOs to include APIs as well as other types of computing activities such as cloud services, virtual machines (VMs), containers, and IoT devices ...

September 03, 2021

I’m a huge fan of the new interface, and I think it’s going to be great for both beginners and experts.

What do you guys think https://t.co/4TzNdidqas ...

September 03, 2021

I’m not sure if I like the new “no-frills” approach to the UI or not.

It's definitely more streamlined, but it also feels a bit too barebones for my tastes https://t.co/00CJmqo71q ...

September 03, 2021

The rise of API risks At its core, APIs enable applications to connect services and transfer data.

Its a communication vessel that allows applications to talk to each other. While this is beneficial for business management, security issues do persist. Whenever an API is produced and used, there ...

September 03, 2021