Nicolas Frankel
2,411 viewsGetting Started Hacking Third-Party APIs on the JVM
Some alternatives that allow you to make third-party APIs behave in a way that their designers didn't intend to!
Category
Security
Nicolas Frankel
2,411 views
Peter Firmstone
7,668 viewsWhy JEP 411 Will Have a Negative Impact on Java Security
SecurityManager, foundation to build secure software, on its own is insufficient to limit users & software to the least privilege principle.
Brian Vermeer
9,849 viewsSanitize All Input! Sanitize All Input! Sanitize All Input!
Cross-site scripting (XSS) is a well-known issue and mostly utilized in JavaScript applications. However, Java is not immune to this!
Brian Vermeer
4,009 viewsPreventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.
Brian Vermeer
4,585 viewsFix Java Security Issues While Coding in IntelliJ IDEA
Let’s see how we can integrate security and secure development into IntelliJ IDEA using the new Snyk vulnerability scanner plugin!
Baruch Sadogursky
6,488 viewsNamespace Shadowing (a.k.a. “Dependency Confusion”) Attack
The npm Registry is vulnerable to supply chain namespace shadowing, also known as “Dependency Confusion” attacks!
Brian Vermeer
10,900 views8 Best Practices to Prevent SQL Injection Attacks
SQL injection, when a user adds untrusted data to a database query, is one of the most dangerous vulnerabilities for online applications.
Brian Vermeer
3,417 viewsSecure Code Review Best Practices (Part 2)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Brian Vermeer
5,108 viewsSecure Code Review Best Practices (Part 1)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Michael Roeschter
3,126 viewsSafe Writing to Files in IoT and Industrial Systems
Learn how to write to disk safely in Java, combining disk sync, shutdown hooks, and atomic renaming of files!