I’m interested in the topic of using simple hardware means as a sort of out-of-band channel to authenticate packets. This question is rather academic in nature, I don’t know of any system like this "in the wild". I can’t seem to …
I am creating a browser(chrome) extension that will serve as a youtube-music last-fm scrobbler(detect songs and send them to last.fm).
I created a last.fm application(docs) which granted me
an api key
a shared secret
Then I followed this…
I wonder what are the benefits of using mTLS for verifying clients when we have an API Key being sent over HTTPS.
I am thinking on backend to backend communications, where one server needs to fetch data from another server.
As far as I can…
I am developing a NestJS application that makes use of the Bullboard feature which brings a web frontend to manage jobs on a job queue inside redis (looking at which jobs are running with what job data, allowing to click a button to retry …
I have an Android application distributed to my users through an .apk file. That app collects some data, and my goal is to upload that data to a cloud service, like BigQuery. To achieve this, I am using my BigQuery’s service account creden…
I am creating an app. Users need to both login and sign-up. I want to simplify the form for this process as much as possible. This got me thinking. Instead of doing the traditional email, confirm email, password, and confirm password setup…
In AWS, Instance identity documents are signed documents that describe instance metadata such as private IP, image ID, etc. An identity document for an instance A an be obtained from instance A using a simple HTTP request to the Metadata s…
My server sets cookies with the JWT and refresh tokens on login, and likewise when the refresh route is hit. If a valid JWT cookie is found in the request for these routes, should a new one be issued? If so, should the old be blacklisted? …
I’m working on an iOS app whose login system does not seem entirely secure but I don’t know enough to be sure.
Skipping account creation, the first time the user logs in they send their user and hashed pass to the server to acquire a toke…
I have just configured my Windows 10 desktop PC at home to automatically log into my Windows 10 user account that my Microsoft account is linked to on startup. My desktop is in my bedroom upstairs and I trust my parents who I live with to …
