Archives for n-Tier Apps
Locking down UAT Environments
Locking Down UAT Egress: What to Whitelist for External APIs When your UAT environment needs to call third-party APIs, give it only the network access it truly needs —…
What the heck is CORs? Can CloudFlare help me with CORs security issues?
Why CORS Is Important (And How to Secure It) Why CORS Is Important (And How to Secure It) What is CORS and why is it important? CORS (Cross-Origin Resource Sharing)…
Strict HTTP Transport Not Enforced
Strict Transport Security Not Enforced What Is HSTS? HSTS (HTTP Strict Transport Security) is a browser-enforced policy that ensures a website is only accessed using HTTPS—even if a user…
Restricting CORS origin to a WHITELIST
Restricting CORS Origin to a Whitelist: Why and How? Modern web applications often rely on APIs hosted on different domains — this is called cross-origin communication. While useful, this opens…
Production Data Copy Options on the Public Cloud
The Use Case Often, a copy of Production data ( in a database) is needed over in a non production environment (in the public cloud). This would entail moving data…
To Domain Join or Not
The risk of domain joining your servers is that if a port scanner (aka hacker) can find an open Netbios port, you would have compromised that server and also the…
Multifactor authentication
Two Factors used in 2FA include : Factor 1 - Something you know (PIN, password, secret questions, etc); Factor 2 - Something you have ( token, key, smartcard, mobile phone)…
Another Chrome FIRST–Privacy through Obscurity…
Not that we needed another reason to use Chrome – but now there’s a Chrome browser extension called Decodelia . Decodelia is a privacy specific plugin which essentially turns your…
Concatenated Queries at the Root of SQL Injection attacks
ORM is supposed to protect against SQL Injection attacks. As are Stored Procedures (due to parametrization of the data in the query). However, both ORMs and Stored Procs will not…
Multiple FROM statements in a LINQ expression
Multiple "from" statements are like nested foreach statements. MSDN example: var scoreQuery = from student in students from score in ; where score > 90 select new {…