Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
securityengineering
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
PostgreSQL COPY PROGRAM Is a Server-Side Execution Boundary
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Nov 3
PostgreSQL COPY PROGRAM Is a Server-Side Execution Boundary
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
Reviewing Docker Seccomp Profiles by Capability, Not Copying One
StarkMan
StarkMan
StarkMan
Follow
Nov 3
Reviewing Docker Seccomp Profiles by Capability, Not Copying One
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
Git SSH Signatures Verify Identity Only Within a Trust File
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Nov 3
Git SSH Signatures Verify Identity Only Within a Trust File
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
Unconstrained Kerberos Delegation Leaves a Reusable Ticket Trail
kozhevniko
kozhevniko
kozhevniko
Follow
Nov 3
Unconstrained Kerberos Delegation Leaves a Reusable Ticket Trail
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
Java Serialization Filters Need an Explicit Class Policy
andreagomez
andreagomez
andreagomez
Follow
Nov 3
Java Serialization Filters Need an Explicit Class Policy
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
PowerShell Logging Is an Evidence Pipeline With Gaps
yutianle
yutianle
yutianle
Follow
Nov 3
PowerShell Logging Is an Evidence Pipeline With Gaps
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
JEA Endpoints Need Role and Session Review Together
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Nov 3
JEA Endpoints Need Role and Session Review Together
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
Safe archive extraction must validate the final path
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Nov 1
Safe archive extraction must validate the final path
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
A PKCS#11 key can be protected and still be over-authorized
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Nov 1
A PKCS#11 key can be protected and still be over-authorized
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
S3 Object Ownership changes control, not the need for an access policy
StarkMan
StarkMan
StarkMan
Follow
Nov 1
S3 Object Ownership changes control, not the need for an access policy
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
DANE TLSA policy only works when the client enforces DNSSEC
kozhevniko
kozhevniko
kozhevniko
Follow
Nov 1
DANE TLSA policy only works when the client enforces DNSSEC
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
An Azure SAS needs a signing scope and a revocation path
jeffrey
jeffrey
jeffrey
Follow
Nov 1
An Azure SAS needs a signing scope and a revocation path
#
cybersecurity
#
securityengineering
Comments
Add Comment
3 min read
Moderation
Kubernetes priority classes can preempt security controls
yutianle
yutianle
yutianle
Follow
Nov 1
Kubernetes priority classes can preempt security controls
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
A cached sudo timestamp is a policy decision with a lifetime
andreagomez
andreagomez
andreagomez
Follow
Nov 1
A cached sudo timestamp is a policy decision with a lifetime
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
binfmt_misc turns an interpreter registration into an execution path
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Nov 1
binfmt_misc turns an interpreter registration into an execution path
#
cybersecurity
#
securityengineering
Comments
Add Comment
2 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account