May 2, 2021 · 1 min read
Don't use the word "auth". Unless everyone knows what you're referring to. There's authentication and then there's authorization. Let's look at the definitions of both and what to do instead of "auth".
June 23, 2020 · 2 min read
Imagine this. Someone uses your website form to send thousands of spam emails. And you wake up to your email reputation being ruined and hundreds of “WTF happened” emails.
May 1, 2020 · 6 min read
Is your code secure? Encryption, hashing, API security, SQL injections, CSRF, XSS, DOS, HSTS, RBAC, .... Oh my. When I started my programming journey, I didn't even know that I should care about software security.