#security Development Tutorials & Tips | Roast Dev

100daysofcode 100daysofdevops 100pay 10mistakes 10yearworkanniversary 11 11labs 11tly 11ty 127001

Snyk and Sonar : committed credentials security test

Disclaimer : this guide deliberately contains an Easter egg - easy to spot security issue. Introduction I've been looking closely to understand the market of the code quality and security prov...

20.04.2025 0 Read More

Exploiting Websites

Today, I’m going to discuss about the small scale applications, their vulnerabilities and how they can be secured. Often the websites, or the web-apps which come out as well developed in specific a...

20.04.2025 0 Read More

SSO vs OAuth – Understand the Key Difference

If you're building modern web or mobile apps, chances are you've come across terms like SSO, OAuth, and OpenID Connect (OIDC). While they often appear together, they serve different purposes. Here’s...

20.04.2025 0 Read More

Why do we need OAuth ?

There are two perspective here when explaining why do we need OAuth. Lets see the user view first. User Perspective Imagine this: you’re using a slick new PDF editing app that lets you annot...

20.04.2025 0 Read More

Understanding XSRF Protection: Implementation in Fetch vs. Axios

Cross-Site Request Forgery (CSRF or XSRF) is an attack that forces authenticated users to execute unwanted actions on web applications where they're currently authenticated. The attack works by tricki...

20.04.2025 0 Read More

User Management in Red Hat Linux: Proven Strategies and Practical Use Cases

Managing users is one of the most important parts of working with any Red Hat Linux system. Whether you're handling a handful of users or supporting an entire organization, good user management helps ...

20.04.2025 0 Read More

How to Secure AWS Lambda Webhooks With Signature Verification

Webhooks are a common way to receive real-time updates from third-party services. When using AWS Lambda to handle webhooks, it's crucial to ensure the incoming requests are authentic. In this tutorial...

21.04.2025 0 Read More

[Vulnerability Campaign] Protect TECNO devices

Are you a white hat who is good at finding Android phone security vulnerabilities?Submit valid critical & high-risk ones, and the reward will be doubled!Activity time: April 20 to May 31, 2025Acti...

21.04.2025 0 Read More

Microsoft Defender for Storage: Threat Detection & Protection for Your Data

Ensuring your environment is secure goes beyond just installing an anti-virus security product on your servers. You need to think about protecting your storage, your apps, containers, databases, ident...

21.04.2025 0 Read More

If You Can't Control Access, You Can't Control the Cloud (Part 1)

Let's be honest, Linux file permissions don't get nearly as much hype as containers or CI/CD pipelines. But without them? Automation breaks. Access controls fail. Security nightmares begin.And that's ...

21.04.2025 0 Read More

Snyk and Sonar : committed credentials security test

Exploiting Websites

SSO vs OAuth – Understand the Key Difference

Why do we need OAuth ?

Understanding XSRF Protection: Implementation in Fetch vs. Axios

User Management in Red Hat Linux: Proven Strategies and Practical Use Cases

How to Secure AWS Lambda Webhooks With Signature Verification

[Vulnerability Campaign] Protect TECNO devices

Microsoft Defender for Storage: Threat Detection & Protection for Your Data

If You Can't Control Access, You Can't Control the Cloud (Part 1)

#reading

#popular