Audit Trail Overview
As part of my current project (secure audit trail) I decided to make a survey about the use of audit trail “in the wild”. I haven’t written in details aboutContinue reading
User Authentication Best Practices Checklist
User authentication is the functionality that every web application shared. We should have perfected that a long time ago, having implemented it so many times. And yet there are soContinue reading
Tracking Cookies and GDPR
GDPR is the new data protection regulation, as you probably already know. I’ve given a detailed practical advice for what it means for developers (and product owners). However, there’s oneContinue reading
Setting Up Cassandra With Priam
I’ve previously explained how to setup Cassandra in AWS. The described setup works, but in some cases it may not be sufficient. E.g. it doesn’t give you an easy wayContinue reading
Using JWT For Sessions
The topic has been discussed many times, on hacker news, reddit, blogs. And the consensus is – DON’T USE JWT (for user sessions). And I largely agree with the criticismContinue reading
Adding Visible Electronic Signatures To PDFs
I’m aware this is going to be a very niche topic. Electronically signing PDFs is far from a mainstream usecase. However, I’ll write it for two reasons – first, IContinue reading
Integration With Zapier
Integration is boring. And also inevitable. But I won’t be writing about enterprise integration patterns. Instead, I’ll explain how to create an app for integration with Zapier. What is Zapier?Continue reading
GDPR for Developers [presentation]
On a recent meetup in Amsterdam I talked about GDPR from a technical point of view, effectively turning my “GDPR – a practical guide for developers” article into a talk.Continue reading
When You Have A Blockchain, Everything Looks Like a Nail
Blockchain, AI, big data, NoSQL, microservices, single page applications, cloud, SOA. What do these have in common? They have been or are hyped. At some point they were “the bigContinue reading
Fix Your Crawler
Every now and then I open the admin panel of my blog hosting and ban a few IPs (after I’ve tried messaging their abuse email, if I find one). ItContinue reading