DEV Community

#securityengineering

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
PostgreSQL COPY PROGRAM Is a Server-Side Execution Boundary

PostgreSQL COPY PROGRAM Is a Server-Side Execution Boundary

Comments
2 min read
Reviewing Docker Seccomp Profiles by Capability, Not Copying One

Reviewing Docker Seccomp Profiles by Capability, Not Copying One

Comments
3 min read
Git SSH Signatures Verify Identity Only Within a Trust File

Git SSH Signatures Verify Identity Only Within a Trust File

Comments
3 min read
Unconstrained Kerberos Delegation Leaves a Reusable Ticket Trail

Unconstrained Kerberos Delegation Leaves a Reusable Ticket Trail

Comments
3 min read
Java Serialization Filters Need an Explicit Class Policy

Java Serialization Filters Need an Explicit Class Policy

Comments
3 min read
PowerShell Logging Is an Evidence Pipeline With Gaps

PowerShell Logging Is an Evidence Pipeline With Gaps

Comments
3 min read
JEA Endpoints Need Role and Session Review Together

JEA Endpoints Need Role and Session Review Together

Comments
3 min read
Safe archive extraction must validate the final path

Safe archive extraction must validate the final path

Comments
2 min read
A PKCS#11 key can be protected and still be over-authorized

A PKCS#11 key can be protected and still be over-authorized

Comments
2 min read
S3 Object Ownership changes control, not the need for an access policy

S3 Object Ownership changes control, not the need for an access policy

Comments
2 min read
DANE TLSA policy only works when the client enforces DNSSEC

DANE TLSA policy only works when the client enforces DNSSEC

Comments
2 min read
An Azure SAS needs a signing scope and a revocation path

An Azure SAS needs a signing scope and a revocation path

Comments
3 min read
Kubernetes priority classes can preempt security controls

Kubernetes priority classes can preempt security controls

Comments
2 min read
A cached sudo timestamp is a policy decision with a lifetime

A cached sudo timestamp is a policy decision with a lifetime

Comments
2 min read
binfmt_misc turns an interpreter registration into an execution path

binfmt_misc turns an interpreter registration into an execution path

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.