punkcoder
Re:
on Tuesday April 02, 2024 @04:23PM (#39910482)
Test-Driven Development (TDD) is a development methodology that prioritizes writing tests for code before the code itself, followed by writing the code to pass those tests. This approach not only ensures the functionality of the code but also presents an opportunity to address security concerns, particularly validation bugs, early in the development process.
Re:Logging: The Unsung Hero in Developer Security – Here's Why and How
on Wednesday March 20, 2024 @10:27AM (#39767068)
In the last blog we talked about what everyone assumed was the most boring topic that you could talk about, keeping your dependencies up to date. But I think I’ve got it topped this time, this time we are going to be talking about that number one thing that all developers love spending their time working on... Logging.
Logging: The Unsung Hero in Developer Security – Here's Why and How
Re:Developer Security – Software Composition Analysis
on Tuesday March 19, 2024 @03:21PM (#39759307)
The differences between application security and developer security are simple enough in principle, but go significantly further as soon as you get past the surface. Many people in the cyber security community seem to place a great emphasis on the effectiveness of application security but in many cases, will completely negate the secondary portion of this which is securing the individual who is responsible for introducing security bugs to the software. I'm not saying that to be harsh, mistakes are a simple part of life and without the proper tooling and education it is very easy to continue to produce mistakes especially when greeted with constricted timelines and consistent budget crunch.
Developer Security – Software Composition Analysis
Re:
on Friday December 22, 2023 @09:25AM (#38734399)
If you are allowing MFA from SMS you should probably not do that.
Re:Duffy and Cruz Introduce the Protecting Internet Freedom Act
on Wednesday June 08, 2016 @07:06PM (#11866409)
"The Protecting Internet Freedom Act would also ensure that the United States maintains sole ownership of the .gov and .mil top-level domains, which are vital to national security."
I almost did a spit take...
Re:List of Dirty, Naughty, Obscene, and Otherwise Bad Words
on Wednesday April 06, 2016 @02:49PM (#11440859)
George Carlin would be proud...
Censure the FBI and James B. Comey for actions related to mobile cryptography
Re:University of Illinois issues DMCA takedown for previous years' hom...
on Wednesday February 11, 2015 @10:28AM (#9033341)
So are they attempting to say that the work done by students as a form of homework, is actually the property of the university?
Re:F.C.C. Is Expected to Propose Regulating the Internet as a Utility
on Monday February 02, 2015 @02:39PM (#8986359)
The statement was more in the direction that when it's a utility local people / municipality are responsible for the maintenance of that system, local people means that there is a far greater chance of getting local, mostly because there is someone local with _responsibility_ for keeping it working.
Re:F.C.C. Is Expected to Propose Regulating the Internet as a Utility
on Monday February 02, 2015 @02:05PM (#8986055)
When I call the water company, I don't talk to some guy in India who has never heard of my state, let alone my city. When the power and water go out, the service isn't great but compared to my internet provider it would be a huge improvement. YMMV.
Re:Ask HN: What are projects I can implement to learn a new framwework?
on Monday December 22, 2014 @04:25PM (#8785336)
I always use project Euler for the learning a language, once you pass that stage I usually go for pet projects.