Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
This is the first of a two part series. In the second post, we will explore the privacy implications of traveler rights at the border across various countries.
Read article: What Rights Do Tourists and Long-Term Foreign Residents Have?Or: How Humanity Performed the Largest Calendar Data Correction in History
Read article: The Time We Deleted Eleven Days from ProductionFor most of human history, keeping track of dates was relatively straightforward. The sun came up; the sun went down.
Read article: The Year 2038 Problem: When Computers Discover Time Is HardThis post is part of my “Post-Quantum Cryptography Series”.
Read article: US Government Mandates All Agencies Fast-Track PQC MigrationAuthentication is one of the most fundamental concepts in application security. Most developers spend considerable time designing how authenticated users are represented, authorized, and managed. Surprisingly, much less attention is given to the opposite state of users who have not authenticated at…
Read article: Understanding Unauthenticated Traffic: How Applications and APIs Represent The Unauthenticated UserFor decades, organizations have focused on keeping attackers out. Firewalls, antivirus software, intrusion detection systems, IAM solutions, and the like all serve a common purpose to prevent unauthorized access. However, many security incidents do not begin with an external attacker breaking in.…
Read article: Data Loss Prevention (DLP): Keeping Your Organization’s Secrets from Walking Out the DoorThere have been many questions about Post-Quantum Cryptography (PQC) recently with clients. So, I figured this would be a good topic to explore.
Read article: Post-Quantum Cryptography SeriesIn my “Dangers of a Cashless Society” post, I briefly described my experiences in Sweden. This post expands on that.
Read article: Sweden’s Cashless Revolution: The Hidden Costs of a Digital EconomyQuick Summary: AES-256 is the workhorse of enterprise data encryption at rest. It is not considered impacted by quantum computers or Post-Quantum Cryptography. It is considered quantum-resistant, which means it can withstand attacks from quantum computers / algorithms better than other encryption…
Read article: AES-256 and the Post-Quantum Panic: The Rare Cryptographic Algorithm That Isn’t SweatingFor decades, modern cryptography has rested on a comforting assumption that factoring really large numbers is hard.
Read article: Shor’s Algorithm: The Quantum Computer’s Favorite Way to Ruin RSA’s DayLooking for something specific? Browse all 124 topics.
