DEV Community

#securityengineering

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
OpenVPN needs a peer identity check beyond a valid certificate
johnettagaweraks profile

OpenVPN needs a peer identity check beyond a valid certificate

#securityengineering #cyber05openvpnpeeridentity
Comments
3 min read
OpenBSD pledge and unveil work best as separate sandbox layers
jeffreyciend profile

OpenBSD pledge and unveil work best as separate sandbox layers

#securityengineering #cyber01openbsdpledgeunveil
Comments
4 min read
FreeBSD Capsicum requires a file-descriptor rights design
bianliang profile

FreeBSD Capsicum requires a file-descriptor rights design

#securityengineering #cyber02freebsdcapsicum
Comments
3 min read
SCIM filters are query syntax, not an authorization policy
andreagomez profile

SCIM filters are query syntax, not an authorization policy

#securityengineering #cyber04scimfilter
Comments
3 min read
Linux audit loginuid keeps the original login identity visible
onaeiuspkz profile

Linux audit loginuid keeps the original login identity visible

#securityengineering #cyber03auditloginuid
Comments
4 min read
Forwarding the GnuPG extra socket transfers signing authority
facilishz profile

Forwarding the GnuPG extra socket transfers signing authority

#securityengineering #cyber06gpgagentextrasocket
Comments
3 min read
YubiKey PIV security depends on slot policy, not model alone
sorrelthorncroft profile

YubiKey PIV security depends on slot policy, not model alone

#securityengineering #cyber07yubikeypivpolicy
Comments
3 min read
X.509 certificate policies need application semantics
ioneyrezende profile

X.509 certificate policies need application semantics

#securityengineering #cyber09x509policyextension
Comments
3 min read
PowerShell Constrained Language Mode limits syntax, not every command
stark_zhuang_df5076f35c68 profile

PowerShell Constrained Language Mode limits syntax, not every command

#securityengineering #cyber10powershellclm
Comments
4 min read
HAProxy client certificate checks stop at the chain and policy you configure
kozhevniko profile

HAProxy client certificate checks stop at the chain and policy you configure

#securityengineering #cyber08haproxyclientcert
Comments
3 min read
Shielded VMs: Key Protectors Are the Real Trust Boundary
johnettagaweraks profile

Shielded VMs: Key Protectors Are the Real Trust Boundary

#cybersecurity #securityengineering
Comments
2 min read
NuGet Source Mapping Closes a Dependency Confusion Gap
ioneyrezende profile

NuGet Source Mapping Closes a Dependency Confusion Gap

#cybersecurity #securityengineering
Comments
2 min read
What Go's Checksum Database Does and Does Not Guarantee
stark_zhuang_df5076f35c68 profile

What Go's Checksum Database Does and Does Not Guarantee

#cybersecurity #securityengineering
Comments
3 min read
Composer's allow-plugins Is a Code Execution Boundary
jeffreyciend profile

Composer's allow-plugins Is a Code Execution Boundary

#cybersecurity #securityengineering
Comments
2 min read
Android Network Security Config: Trust Anchors Are a Policy Decision
andreagomez profile

Android Network Security Config: Trust Anchors Are a Policy Decision

#cybersecurity #securityengineering
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.