Here is how to setup a list of IP addresses / subnets that are allowed to call a Django Rest Framework endpoint. All other IP addresses will be blocked. Using an IP safe list is much easier than dealing with … Continue reading
Django has a number of built in security measures which are really helpful. In fact as frameworks go by default it does a lot of really smart things security wise. There are a few less commonly known settings that improve … Continue reading
Your KeePass file might not be as safe as you think, but it is easy to protect yourself with this simple settings change that does not require creating a new kdbx file. This helps make your KeePass file more secure by deterring … Continue reading
Ubuntu has built in home folder encryption similar to OSX. I always turn on this feature on both OSs and have never experienced any perceptible performance hit. This guide shows one approach to migrating the MySQL data directory into the … Continue reading
MySQL offers native support for connecting via SSL. By default this is available in AWS RDS MySQL instances. Using this connection method effectively encrypts all data going back and forth between the client and the server. This prevents eavesdropping (aka … Continue reading
I just finished reading the book Geekonomics – the real cost of insecure software. The book sums up commercial software development from a business perspective succinctly: “Don’t worry, be crappy.” http://www.geekonomicsbook.com/ It is a pretty interesting topic – and should be … Continue reading
Basic GnuPG instructions, create and backup keys, encryption and decryption of files. This GnuPG tutorial covers installing and running the basics of GnuPG: encrypt, decrypt, create and export or backup your public and private keys. It is geared for a … Continue reading
How to Break Web Software Functional and Security Testing of Web Applications and Web Services, by Mike Andrews and James A. Whittaker Published 2006 Contains recipes for 24 different hacks. Most of them are supposed to be common knowledge in the field … Continue reading
