In our setup we need both reliable user authentication and scope-based authorization.
Consider the following scenario: a user logs in into our client (portal) using OpenID Connect, and our client wants to access a resource (“read”) on a …
I’ve never been happy with the explanation DocuSign gives for themselves in their own marketing material (e.g. https://www.docusign.com/how-it-works/electronic-signature/digital-signature/digital-signature-faq, https://www.docusign.com/pro…
I figured this would be the most relevant place to ask this question. I’m using a Kali VM to run some network scans. The results are different depending on whether my network interface is bridged or NATed.
Running this scan nmap -sn 192.1…
I’m in need of a CSRF token, for a certain application that submits a form with POST. Ideally, I’d like to not make a DB call for each submission, to avoid storage and DB traffic & latency. To this end OWASP’s “CSRF Prevention Cheat Sh…
I would like to secure a JavaScript Single Page App with SAML. My server is powered using Node.js and serves a RESTful API. What are my options?
Details: I have worked with OAuth2 in the past, but I am not familiar with SAML concepts. Wit…
Newspapers have the ability to do more than simply keep us current
with worldly affairs; we can use them to squash bugs! Yet, as we move
from waiting on the newspaper delivery boy to reading breaking news on
ePapers, we lose the subtle art of bug…
Newspapers have the ability to do more than simply keep us current
with worldly affairs; we can use them to squash bugs! Yet, as we move
from waiting on the newspaper delivery boy to reading breaking news on
ePapers, we lose the subtle art of bug…
Introduction
This post continues the FireEye Labs Advanced Reverse Engineering
(FLARE) script series. In this post, we continue to discuss the flare-dbg project. If you haven’t read my first
post on using flare-dbg to automate string
decodi…
Introduction
This post continues the FireEye Labs Advanced Reverse Engineering
(FLARE) script series. In this post, we continue to discuss the flare-dbg project. If you haven’t read my first
post on using flare-dbg to automate string
decodi…
The Enhanced Mitigation Experience Toolkit (EMET) benefits enterprises and all computer users by helping to protect against security threats and breaches that can disrupt businesses and daily lives. It does this by anticipating, diverting, terminating,…
