What's the difference between Authentication and Authorization?

May 2, 2021 · 1 min read
Don't use the word "auth". Unless everyone knows what you're referring to. There's authentication and then there's authorization. Let's look at the definitions of both and what to do instead of "auth".

You Should Care About Email Flooding. This Is How to Avoid It.

June 23, 2020 · 2 min read
Imagine this. Someone uses your website form to send thousands of spam emails. And you wake up to your email reputation being ruined and hundreds of “WTF happened” emails.

What Every Junior Developer Should Learn About Software Security

May 1, 2020 · 6 min read
Is your code secure? Encryption, hashing, API security, SQL injections, CSRF, XSS, DOS, HSTS, RBAC, .... Oh my. When I started my programming journey, I didn't even know that I should care about software security.