pganalyze.com
Using Postgres Row-Level Security in Python and Django:
Learn how to create and implement a row level security policy with Django middleware and Django signals, allowing to limit the database rows a user can access.
Flavio Juvenal
Lessons about Security (page 3)
The links, tools and tips our engineers and designers share with each other, one “today I learned” at a time.
- lessons shared
- 68
- people sharing
- 19
- database started in
- 2016
Tech Insights· pganalyze.com
Using Postgres Row-Level Security in Python and Django:
From pganalyze.com
Learn how to create and implement a row level security policy with Django middleware and Django signals, allowing to limit the database rows a user can access.
Shared by
Read on pganalyze.com- Django
- PostgreSQL
- Security
Tech Insights· microsoft.com
Microsoft's Security Development Lifecycle (SDL) practices to help developers build more secure software by reducing the number and severity of vulnerabilities.
Shared by
Read on microsoft.com- Development
- Process
- Security
cyborgsecurity.com
Python malware on the rise
The vast majority of serious malware over the past 30 years has been written in Assembly or compiled languages such as C, C++, and Delphi. However,…
Amanda Savluchinske
Tech Insights· cyborgsecurity.com
Python malware on the rise
From cyborgsecurity.com
The vast majority of serious malware over the past 30 years has been written in Assembly or compiled languages such as C, C++, and Delphi. However,…
Shared by
Read on cyborgsecurity.com- Python
- Security
tonybaloney.github.io
XSS Exploitation in Django Applications
A deep-dive on XSS exploitations in Django applications, how to find them and how to fix them
Filipe Ximenes
Tech Insights· tonybaloney.github.io
XSS Exploitation in Django Applications
From tonybaloney.github.io
A deep-dive on XSS exploitations in Django applications, how to find them and how to fix them
Shared by
Read on tonybaloney.github.io- Django
- Security
Tech Insights· medium.com
Running Penetration Tests for your Website with OWASP ZAP:
Shared by
Read on medium.com- Security
Tech Insights· medium.com
Changing / Rotating Django Secret Key without logging users out:
Shared by
Read on medium.com- Django
- Security
apisecurity.io
OWASP Top 10 API Vulnerabilities in 2019
The first OWASP API Security Top 10 list was released on 31 December 2019. They are listed below
David Pierre
Tech Insights· apisecurity.io
OWASP Top 10 API Vulnerabilities in 2019
From apisecurity.io
The first OWASP API Security Top 10 list was released on 31 December 2019. They are listed below
Shared by
Read on apisecurity.io- API
- Security
- Link offline
lchsk.com · offline
Overview of common security vulnerabilities in web applications, examples in Django:
Rebeca Sarai
Link offlineTech Insights· lchsk.com
Overview of common security vulnerabilities in web applications, examples in Django:
Shared by
The original link on lchsk.com is no longer available.
Look for it on the Wayback Machine- Security
- Web
Tech Insights· youtube.com
Hands-On Web Application Security with Django - PyCon 2019
Shared by
Read on youtube.com- Django
- Security
lgtm.com
LGTM, a continuous security analysis. A code analysis platform for finding zero-days and preventing critical vulnerabilities
Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com.
Rebeca Sarai
Tech Insights· lgtm.com
LGTM, a continuous security analysis. A code analysis platform for finding zero-days and preventing critical vulnerabilities
From lgtm.com
Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com.
Shared by
Read on lgtm.com- Code
- Security
- Link offline
github.com · offline
Safely install packages with npm or yarn by auditing them as part of your install process:
Rebeca Sarai
Link offlineTech Insights· github.com
Safely install packages with npm or yarn by auditing them as part of your install process:
Shared by
The original link on github.com is no longer available.
Look for it on the Wayback Machine- Npm
- Security
stackoverflow.blog
Preventing the Top Security Weaknesses Found in Stack Overflow Code Snippets:
Last week, we told you about research that found a number of security vulnerabilities in code snippets in Stack Overflow answers, and how some of those flaws had migrated into actual, real-live Github projects. Today, we’re following up on the top eight error types that research highlighted and suggesting ways to avoid making the same mistakes.
Rebeca Sarai
Tech Insights· stackoverflow.blog
Preventing the Top Security Weaknesses Found in Stack Overflow Code Snippets:
From stackoverflow.blog
Last week, we told you about research that found a number of security vulnerabilities in code snippets in Stack Overflow answers, and how some of those flaws had migrated into actual, real-live Github projects. Today, we’re following up on the top eight error types that research highlighted and suggesting ways to avoid making the same mistakes.
Shared by
Read on stackoverflow.blog- Security
Tech Insights· youtube.com
Bust-A-Kube CTF: attacking and defending Kubernetes
Shared by
Read on youtube.com- Kubernetes
- Security
Tech Insights· cloud.google.com
Modern password security for system designers
Shared by
Read on cloud.google.com- Security
- System Design
github.com
Small Python library that makes it easy to exploit race conditions in web apps with Requests
Small Python library that makes it easy to exploit race conditions in web apps with Requests. - nccgroup/requests-racer
Flávio Juvenal
Tech Insights· github.com
Small Python library that makes it easy to exploit race conditions in web apps with Requests
From github.com
Small Python library that makes it easy to exploit race conditions in web apps with Requests. - nccgroup/requests-racer
Shared by
Read on github.com- Concurrency
- Python
- Requests
- Security
Book a call
Found it useful?
Let’s put it to work.
Tell us about your product and the problem in front of you. We’ll bring what we’ve learned on real projects.
Tell us about your product, and we’ll bring what we’ve learned.
Still prefer the good old email? Contact us
