Category - API Security Blog

Im a big fan of the new iPad.

It is fast, light and has a great screen. I would recommend it to anyone who wants an iPad but doesnt want to spend $499 on the latest model. I have been using my old iPad for almost two years now, ...

September 21, 2021

API security is a shared responsibility, and the API Security Checklist helps you get started

API security is a shared responsibility, and the API Security Checklist helps you get started https://t.co/dzuPgVtOnG ...

September 21, 2021

1.

Make a copy of the file you want to edit in /etc/init.d and name it something else (e.g.: my_service) 2. Edit this new file, add your own code at the bottom of the script, save and exit (Ctrl+X). 3. ...

September 21, 2021

Im a software developer.

I like to work with the latest technologies, and Ive been doing that for over 20 years now. I started my career in 1995 as a C++ programmer at an insurance company, where I worked on their mainfram ...

September 21, 2021

Im a software developer and entrepreneur.

I like to build things that help people do their jobs better, and make the world a little bit better in the process. I started my professional career as an engineer at Microsoft, where I worked on Wi ...

September 21, 2021

I have a new blog post up on the topic of using the C++14 range-based for loop.

Its called C++14 Ranges: The Good Parts and it covers some of the best parts about ranges, including their use in algorithms like std::copy . You can read it here https://t.co/U09QukYJub ...

September 21, 2021

SAST tools are not designed for API-centric applications API security is a different ball game to web application security The OWASP Top 10 list of vulnerabilities for APIs includes: Cross Site Request Forgery (CSRF) Broken Authentication and Session Management Insecure Direct Object References Sensitive Data Exposure Exposed Debug Information Security Misconfiguration Unvalidated Redirects and Forwards Using Components with Known Vulnerabilities Insufficient Transport Layer Protection.

These are all very similar to the OWASP Top 10 list of vulnerabilities for web applications, but there are some notable differences https://t.co/FKRC0FUNpg ...

September 21, 2021

I’m a software engineer with experience in building web applications, mobile apps, and backend services.

I have an eye for design and am passionate about creating clean, usable interfaces. I graduated from the University of Washington in 2017 with a Bachelor's degree in Computer Science & Engineerin ...

September 21, 2021