So You Want to Build an App, Revisited: What Changed and What Didn’t
In 2015, I wrote “So you want to build an App..” because a few times a month someone asked me…
Tag: security
Do Passkeys Solve the Deployability Issue?
This was originally published on the Pangea Cyber blog on 13 May 2024. I’ve lost count of how many RSA…
Why this security breach is worse than all the others combined
During the week of June 8th, the Office of Personnel Management (OPM) announced that the records of all current and…
On Disaster Planning
Last week, I was teaching the Security Class for php|architect and talked not only about protecting your applications from security…
The First Rule for Software Development
Recently I taught a class of bright-eyed, bushy-tailed PHP’ers just getting their start in the world. They haven’t done their…
Credit Card Information and You
It seems that at least once a week, I have a customer or see another developer ask a simple question:…
Haven't We Suffered Enough?
About 20 months ago, I underwent a procedure. Although my life was never in danger and I didn't have to…
Vulnerability Disclosure / dotProject
In the past week, a few people have called me to task about referencing the dotProject vulnerability in the Project…
Sometimes Being Right…
… is the worst possible thing you can be. One of the aspects of the work that I do is…
dotProject 2.0.4 – Cross Site Scripting Vulnerability
Updated: See the alternative fix below… In the past 24 hours, I've received numerous panicked emails from dotProject users about…