Devsecurely https://www.devsecurely.com/blog A blog to spread the security light Wed, 16 Oct 2024 06:03:44 +0000 en-US hourly 1 https://wordpress.org/?v=6.4.1 https://www.devsecurely.com/blog/wp-content/uploads/2023/12/favicon.png Devsecurely https://www.devsecurely.com/blog 32 32 How to win money and influence your superiors https://www.devsecurely.com/blog/2024/10/how-to-win-money-and-influence-your-superiors?utm_source=rss&utm_medium=rss&utm_campaign=how-to-win-money-and-influence-your-superiors https://www.devsecurely.com/blog/2024/10/how-to-win-money-and-influence-your-superiors#respond Wed, 16 Oct 2024 06:03:43 +0000 https://www.devsecurely.com/blog/?p=571 When I understood this simple concept, I was able to become a beast. I used to be a pentester for a consultancy firm. And every year, they gave me...

The post How to win money and influence your superiors appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/10/how-to-win-money-and-influence-your-superiors/feed 0 Protecting your baby: The SAFER Framework for Secure Coding https://www.devsecurely.com/blog/2024/09/protecting-your-baby-the-safer-framework-for-secure-coding?utm_source=rss&utm_medium=rss&utm_campaign=protecting-your-baby-the-safer-framework-for-secure-coding https://www.devsecurely.com/blog/2024/09/protecting-your-baby-the-safer-framework-for-secure-coding#respond Mon, 23 Sep 2024 08:25:11 +0000 https://www.devsecurely.com/blog/?p=520 In that dimly lit hospital room, I lifted that small and fragile baby. Even though my wife just gave birth to him, I instinctively loved him. I vowed to...

The post Protecting your baby: The SAFER Framework for Secure Coding appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/09/protecting-your-baby-the-safer-framework-for-secure-coding/feed 0 Password policy: a complete guide to protecting your users https://www.devsecurely.com/blog/2024/08/password-policy-a-complete-guide-to-protecting-your-users?utm_source=rss&utm_medium=rss&utm_campaign=password-policy-a-complete-guide-to-protecting-your-users https://www.devsecurely.com/blog/2024/08/password-policy-a-complete-guide-to-protecting-your-users#respond Fri, 30 Aug 2024 20:26:55 +0000 https://www.devsecurely.com/blog/?p=433 Some break-ins happened in your neighborhood. So, you decided to turn your house into a fortress. You fortified the walls, installed alarm systems on all the windows and bought...

The post Password policy: a complete guide to protecting your users appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/08/password-policy-a-complete-guide-to-protecting-your-users/feed 0 A complete guide to secure user account management https://www.devsecurely.com/blog/2024/08/a-complete-guide-to-secure-user-account-management?utm_source=rss&utm_medium=rss&utm_campaign=a-complete-guide-to-secure-user-account-management https://www.devsecurely.com/blog/2024/08/a-complete-guide-to-secure-user-account-management#respond Fri, 30 Aug 2024 09:36:19 +0000 https://www.devsecurely.com/blog/?p=499 Imagine putting on a fake mustache, stepping into a company pretending to be the CEO, and firing everyone. Or, imagine putting on a sexy grin, going into MI6 offices...

The post A complete guide to secure user account management appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/08/a-complete-guide-to-secure-user-account-management/feed 0 A complete guide to secure password storage https://www.devsecurely.com/blog/2024/07/a-complete-guide-to-secure-password-storage?utm_source=rss&utm_medium=rss&utm_campaign=a-complete-guide-to-secure-password-storage https://www.devsecurely.com/blog/2024/07/a-complete-guide-to-secure-password-storage#respond Thu, 04 Jul 2024 16:34:06 +0000 https://www.devsecurely.com/blog/?p=266 I was staring blankly at my screen in disbelief. My heart was racing, and my fingers were shaking. My alarm clock was ringing, but it didn’t even make me...

The post A complete guide to secure password storage appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/07/a-complete-guide-to-secure-password-storage/feed 0 CORS: the ultimate guide https://www.devsecurely.com/blog/2024/06/cors-the-ultimate-guide?utm_source=rss&utm_medium=rss&utm_campaign=cors-the-ultimate-guide https://www.devsecurely.com/blog/2024/06/cors-the-ultimate-guide#comments Mon, 03 Jun 2024 16:41:16 +0000 https://www.devsecurely.com/blog/?p=191 Imagine visiting a website showing innocent kitten pictures. But behind all those cute feline creatures hides this website’s superpower. As soon as someone visits this website, the owner of...

The post CORS: the ultimate guide appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/06/cors-the-ultimate-guide/feed 2 Lock Down Your Admin Area: How to Control Access for Maximum Security https://www.devsecurely.com/blog/2024/05/lock-down-your-admin-area-how-to-control-access-for-maximum-security?utm_source=rss&utm_medium=rss&utm_campaign=lock-down-your-admin-area-how-to-control-access-for-maximum-security https://www.devsecurely.com/blog/2024/05/lock-down-your-admin-area-how-to-control-access-for-maximum-security#respond Mon, 27 May 2024 13:53:48 +0000 https://www.devsecurely.com/blog/?p=185 The white house situation room is the pinnacle of power in the USA and in the world. There, the president gets his security briefings, and from there he can...

The post Lock Down Your Admin Area: How to Control Access for Maximum Security appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/05/lock-down-your-admin-area-how-to-control-access-for-maximum-security/feed 0 The simple 3 step process to reduce your network exposure https://www.devsecurely.com/blog/2024/05/the-simple-3-step-process-to-reduce-your-network-exposure?utm_source=rss&utm_medium=rss&utm_campaign=the-simple-3-step-process-to-reduce-your-network-exposure https://www.devsecurely.com/blog/2024/05/the-simple-3-step-process-to-reduce-your-network-exposure#respond Fri, 24 May 2024 16:19:43 +0000 https://www.devsecurely.com/blog/?p=180 In an n-tier architecture application, a client communicates with at least one service. This target service is hosted on a particular server. Let us take a web application as...

The post The simple 3 step process to reduce your network exposure appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/05/the-simple-3-step-process-to-reduce-your-network-exposure/feed 0 7 tips to make your upload API hack proof https://www.devsecurely.com/blog/2024/05/7-tips-to-make-your-upload-api-hack-proof?utm_source=rss&utm_medium=rss&utm_campaign=7-tips-to-make-your-upload-api-hack-proof https://www.devsecurely.com/blog/2024/05/7-tips-to-make-your-upload-api-hack-proof#respond Fri, 17 May 2024 08:46:35 +0000 https://www.devsecurely.com/blog/?p=159 If you allow users to upload files, you need to make sure your website is secure against common file upload attacks. This post helps you identify potential issues and...

The post 7 tips to make your upload API hack proof appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/05/7-tips-to-make-your-upload-api-hack-proof/feed 0 How RCE Vulnerabilities Spell Disaster for Websites and Companies https://www.devsecurely.com/blog/2024/04/how-rce-vulnerabilities-spell-disaster-for-websites-and-companies?utm_source=rss&utm_medium=rss&utm_campaign=how-rce-vulnerabilities-spell-disaster-for-websites-and-companies https://www.devsecurely.com/blog/2024/04/how-rce-vulnerabilities-spell-disaster-for-websites-and-companies#respond Tue, 30 Apr 2024 07:44:37 +0000 https://www.devsecurely.com/blog/?p=156 Remote Code Execution (RCE) is a category of vulnerabilities. These allow an attacker to execute system commands on the server. A lot of vulnerabilities allow direct system command execution....

The post How RCE Vulnerabilities Spell Disaster for Websites and Companies appeared first on Devsecurely.

]]> https://www.devsecurely.com/blog/2024/04/how-rce-vulnerabilities-spell-disaster-for-websites-and-companies/feed 0