The Confusing Case of Git Signatures on GitHub
An explanation of some of the things GitHub does to smooth out the sharp edges of commit signing and one of the gotcha's with their process.
An explanation of some of the things GitHub does to smooth out the sharp edges of commit signing and one of the gotcha's with their process.
When NTP Interactions Go Wrong
A walkthrough of an issue with interactions with NTP that lead to vastly incorrect dates
A walkthrough of an issue with interactions with NTP that lead to vastly incorrect dates
Microsoft Gets A Firm Reprimand From the Cyber Safety Review Board
A review of the CSRB report on Microsoft's summer 2023 Exchange intrusion.
A review of the CSRB report on Microsoft's summer 2023 Exchange intrusion.
Modern Methods for Cross Site Request Forgery (CSRF) Protection
A dive into different methods to protect against cross site request forgery (CSRF). Including custom headers, signed double-submit cookies, and cookie settings.
A dive into different methods to protect against cross site request forgery (CSRF). Including custom headers, signed double-submit cookies, and cookie settings.
The Next.js Conf Picture That Blew People's Minds
Seeing a SQL statement in a React component has caught the internet's attention in both good and bad ways. Let's discuss the different camps people have ended up in.
Seeing a SQL statement in a React component has caught the internet's attention in both good and bad ways. Let's discuss the different camps people have ended up in.
142 more posts can be found in the archive.