OWASP Training @ PluralSight

Sat through the OWASP Top 10 training this Thursday. What's sad is how little heart & soul today's devs put into their work. Simple, assumed items like security fail to make it in the appa they build simply b/c they are told to do it. 

When interviewing devs, understanding their development philosophies are critical to know the way they code. Without knowing their personal coding integrity, you're risking a lot.

Thank you Troy Hunt for bring more exposure to security and its importance.


Comments

Post a Comment

Popular posts from this blog

Real World NodeJS w/ Continuous Integration

Running a NodeJS / Express / PM2 PM2 basically deamonizes node express... and when new files are uploaded need to run "pm2 restart" A TeamCity plugin to ssh and run the above command is a must, and I can't seem to find one that exists. I wrote a simple PowerShell script to execute PLink (from Putty) but will fail if the host thumbprint isnt already in the list of cached entries. Plink does provide means to enter the location of the private key file, but another/better solution ahould be used. Follow-up: The TeamCity plug-in "Deployment" or "Deployer" contains this SSH Exec build runner... and a few others on the team are using it in their own projects. It really is a time/life saver.
Read more

Remote / Working from Home, Part 4

[Part 1] [Part 2] [Part 3] Distractions Home distractions are very different than office workplace distractions because they are much more personal. The lines are blurred between office and home life.  Here are some useful tips to get through the day: No matter how clear the boundaries, family will always see you as "the dad" or "the mom." It can be very difficult and takes everyone time to get used to. It's better to handle their requests than to get angry. A dedicated room/office is best. Room dividers work. Meetings and calls Make it clear that you are in a meeting Keep a cool head while on the phone and your 2 yr old demands mac & cheese. These all go back to the other entries about working from home: a routine, personal presentation, cleanliness, organization -- all of these communicate to family and others that you have your game face on and providing for them. Conclusion It's not always easy to follow these bullet points. Heck, I find myself i
Read more

Fallout 3 (2008) on Windows 10 in 2021

Preface I'm adding a log of things I'm working on (both professional and fun), as a way to both document experiences and remember what the hell I did. Otherwise, it's lost to the ages just like the very early web cam sessions I did with both of my sons, which were lost to a hard drive failure. For the last 10 years or so, I had shifted my attention to family & work. I avoided large game titles. Now, it's time to play again. Fallout 3 : Post Install from Steam in 2021 Just finished Fallout 4, at least to the point of finishing every main quest and last DLC with Nuka-World Open Season. Prior to that Fallout: New Vegas. Wasn't sure if I wanted to try 76 or 3 next. Opted for the latter. In retrospect, I should have both consulted Reddit, Steam Community and/or Nexus Mods before trying to run the 13 year-old game. https://steamcommunity.com/app/22370/discussions/0/828937546147175081/ GFWL Fix: https://www.nexusmods.com/fallout3/mods/22591 Intel Fix: https://www.nexus
Read more