OWASP Training @ PluralSight

Sat through the OWASP Top 10 training this Thursday. What's sad is how little heart & soul today's devs put into their work. Simple, assumed items like security fail to make it in the appa they build simply b/c they are told to do it. 

When interviewing devs, understanding their development philosophies are critical to know the way they code. Without knowing their personal coding integrity, you're risking a lot.

Thank you Troy Hunt for bring more exposure to security and its importance.


Comments

Post a Comment

Popular posts from this blog

Real World NodeJS w/ Continuous Integration

Running a NodeJS / Express / PM2 PM2 basically deamonizes node express... and when new files are uploaded need to run "pm2 restart" A TeamCity plugin to ssh and run the above command is a must, and I can't seem to find one that exists. I wrote a simple PowerShell script to execute PLink (from Putty) but will fail if the host thumbprint isnt already in the list of cached entries. Plink does provide means to enter the location of the private key file, but another/better solution ahould be used. Follow-up: The TeamCity plug-in "Deployment" or "Deployer" contains this SSH Exec build runner... and a few others on the team are using it in their own projects. It really is a time/life saver.
Read more

Remote / Working from Home, Part 4

[Part 1] [Part 2] [Part 3] Distractions Home distractions are very different than office workplace distractions because they are much more personal. The lines are blurred between office and home life.  Here are some useful tips to get through the day: No matter how clear the boundaries, family will always see you as "the dad" or "the mom." It can be very difficult and takes everyone time to get used to. It's better to handle their requests than to get angry. A dedicated room/office is best. Room dividers work. Meetings and calls Make it clear that you are in a meeting Keep a cool head while on the phone and your 2 yr old demands mac & cheese. These all go back to the other entries about working from home: a routine, personal presentation, cleanliness, organization -- all of these communicate to family and others that you have your game face on and providing for them. Conclusion It's not always easy to follow these bullet points. Heck, I find myself i
Read more

Remote / Working from Home, Part 3

[Part 1] [Part 2] [Part 3] The previous entries went through the basics of everyday "working remote." This entry talks about new hires or new teams introductions and other good stuff.  Initiative, Integrity and Vigilance Working remote, when starting with a new team can be a little awkward. Especially when you've never met the team in person first. These are good guidelines for this situation. Ask questions - Show Initiative Sesame Street taught my youngest: "Asking questions is the best way to learn." Not sure which questions to ask? Find someone, anyone that is available Ask to be pointed in the right direction Don't assume everyone will drop what they're doing. Be patient. Be calm. Basic Questions to Ask: Who can help with HR questions? Payroll Dates Benefits Timesheets Expenses Time Off Requests Who is my manager, if not working on the same project? Who are the members of the team I'm working on? What access, resources, documentation do I need
Read more