Audit Trail Overview
As part of my current project (secure audit trail) I decided to make a survey about the use of audit trail “in the wild”. I haven’t written in details aboutContinue reading
User Authentication Best Practices Checklist
User authentication is the functionality that every web application shared. We should have perfected that a long time ago, having implemented it so many times. And yet there are soContinue reading
Setting Up Cassandra With Priam
I’ve previously explained how to setup Cassandra in AWS. The described setup works, but in some cases it may not be sufficient. E.g. it doesn’t give you an easy wayContinue reading
Using JWT For Sessions
The topic has been discussed many times, on hacker news, reddit, blogs. And the consensus is – DON’T USE JWT (for user sessions). And I largely agree with the criticismContinue reading
Adding Visible Electronic Signatures To PDFs
I’m aware this is going to be a very niche topic. Electronically signing PDFs is far from a mainstream usecase. However, I’ll write it for two reasons – first, IContinue reading
Integration With Zapier
Integration is boring. And also inevitable. But I won’t be writing about enterprise integration patterns. Instead, I’ll explain how to create an app for integration with Zapier. What is Zapier?Continue reading
GDPR for Developers [presentation]
On a recent meetup in Amsterdam I talked about GDPR from a technical point of view, effectively turning my “GDPR – a practical guide for developers” article into a talk.Continue reading
Fix Your Crawler
Every now and then I open the admin panel of my blog hosting and ban a few IPs (after I’ve tried messaging their abuse email, if I find one). ItContinue reading
OWASP Dependency Check Maven Plugin – a Must-Have
I have to admit with a high degree of shame that I didn’t know about the OWASP dependency check maven plugin. And seems to have been around since 2013. AndContinue reading
Using Trusted Timestamping With Java
Trusted timestamping is the process of having a trusted third party (“Time stamping authority”, TSA) certify the time of a given event in electronic form. The EU regulation eIDAS givesContinue reading