Links tagged “security”
48 links, newest first.
github.com
Claw Patrol: a protocol-aware firewall for AI agents, parsing HTTP, Postgres and SSH to decide what your agent may actually do. See the intro for why you might want one.
daniel.haxx.se
Curl will not accept vulnerability reports during July 2026: Daniel Stenberg pauses the bug bounty, drowned in AI-generated slop reports.
aldenhallak.com
A postmortem for drawafish was published (if you missed it, you can find it in last week's newsletter), highlighting technical and operational challenges encountered.
thenewstack.io
Should we let AI review its own code for security?
xkcd.com
The comic that put "correct horse battery staple" into the language.
httptoolkit.com
What is X-Forwarded-For and when can you trust it? (2024)
arstechnica.com
What to know about ToolShell, the SharePoint threat under mass exploitation
projectcalico.org
Get Started with Project Calico Project Calico works with Docker, Kubernetes, Mesos, DC/OS, OpenStack - and more!
sqreen.io
A real-time protection tool like Sqreen allows you to orchestrate your app security easily.
runnable.com
HTTPS is an extremely important part of deploying applications to the web.
django-guardian.readthedocs.io
© Copyright Lukasz Balcerzak.
consideratecode.com
A friend recently mentioned that he was caught by surprise when he was asked to explain CORS in a job interview.
oauthbible.com
Reference Terminology Signed Requests Sources OAuth 1.0a One Legged Two Legged Three Legged Echo xAuth OAuth2 Two-Legged Three-Legged Refresh Token Terminology / Reference Signed / Signature String made up of several HTTP request elements in a single string.
python-oauth2.readthedocs.io
from wsgiref.simpleserver import makeserver import oauth2 import oauth2.grant import oauth2.error import oauth2.store.memory import oauth2.tokengenerator import oauth2.web.wsgi Create a SiteAdapter to interact with the user.
developers.google.com
Google APIs use the OAuth 2.0 protocol for authentication and authorization.
auth0.com
Introduction There are basically two different ways of implementing server side authentication for apps with a frontend and an API: The most adopted one, is Cookie-Based Authentication (you can find an example here) that uses server side cookies to authenticate the user on every request.
github.com
API Gateway & Microservice Management Kong is a scalable, open source API Layer (also known as an API Gateway, or API Middleware).
